Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-5798 (GCVE-0-2019-5798)
Vulnerability from cvelistv5
- Out of bounds read
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T20:09:22.434Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://crbug.com/883596"
},
{
"name": "DSA-4451",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "openSUSE-SU-2019:1666",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"status": "affected",
"version": "prior to 73.0.3683.75"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Out of bounds read",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-06-28T17:06:06",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://crbug.com/883596"
},
{
"name": "DSA-4451",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "openSUSE-SU-2019:1666",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@google.com",
"ID": "CVE-2019-5798",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_value": "prior to 73.0.3683.75"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Out of bounds read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
},
{
"name": "https://crbug.com/883596",
"refsource": "MISC",
"url": "https://crbug.com/883596"
},
{
"name": "DSA-4451",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "openSUSE-SU-2019:1666",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2019-5798",
"datePublished": "2019-05-23T19:17:29",
"dateReserved": "2019-01-09T00:00:00",
"dateUpdated": "2024-08-04T20:09:22.434Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2019-5798\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2019-05-23T20:29:01.047\",\"lastModified\":\"2024-11-21T04:45:30.940\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\"},{\"lang\":\"es\",\"value\":\"La falta de comprobaci\u00f3n de l\u00edmites correcta en Skia en Google Chrome antes de la versi\u00f3n 73.0.3683.75, permiti\u00f3 que un atacante remoto ejecutara una lectura de memoria fuera de l\u00edmites por medio de una p\u00e1gina HTML creada.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"73.0.3683.75\",\"matchCriteriaId\":\"EA174888-9FEB-4029-8E0D-D6CFCF1A74F6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:suse:package_hub:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"284A8DA0-317B-4BBE-AECB-7E91BBF0DD3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07C312A0-CD2C-4B9C-B064-6409B25C278F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:backports:sle-15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CBC4824-9D9F-427D-87A6-60B2CEBAAFEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E78106-58E6-4D59-990F-75DA575BFAD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1308\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1309\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1310\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://crbug.com/883596\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://seclists.org/bugtraq/2019/May/67\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://usn.ubuntu.com/3997-1/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://www.debian.org/security/2019/dsa-4451\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1308\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1309\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:1310\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://crbug.com/883596\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://seclists.org/bugtraq/2019/May/67\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/3997-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2019/dsa-4451\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
RHSA-2019:1308
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1308",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1308.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:38+00:00",
"generator": {
"date": "2025-10-09T18:21:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1308",
"initial_release_date": "2019-06-03T20:52:39+00:00",
"revision_history": [
{
"date": "2019-06-03T20:52:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:52:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debugsource@60.7.0-1.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debugsource@60.7.0-1.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.src",
"product_id": "thunderbird-0:60.7.0-1.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
RHSA-2019:1267
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1267",
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1267.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:36+00:00",
"generator": {
"date": "2025-10-09T18:21:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1267",
"initial_release_date": "2019-05-23T15:53:40+00:00",
"revision_history": [
{
"date": "2019-05-23T15:53:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T15:53:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64",
"product_id": "firefox-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.i686",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.i686",
"product_id": "firefox-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.src",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.src",
"product_id": "firefox-0:60.7.0-1.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.s390x",
"product_id": "firefox-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64",
"product_id": "firefox-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019:1308
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1308",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1308.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:38+00:00",
"generator": {
"date": "2025-10-09T18:21:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1308",
"initial_release_date": "2019-06-03T20:52:39+00:00",
"revision_history": [
{
"date": "2019-06-03T20:52:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:52:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debugsource@60.7.0-1.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debugsource@60.7.0-1.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.src",
"product_id": "thunderbird-0:60.7.0-1.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019_0708
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 73.0.3683.75.\n\nSecurity Fix(es):\n\n* chromium-browser: Use after free in Canvas (CVE-2019-5787)\n\n* chromium-browser: Use after free in FileAPI (CVE-2019-5788)\n\n* chromium-browser: Use after free in WebMIDI (CVE-2019-5789)\n\n* chromium-browser: Heap buffer overflow in V8 (CVE-2019-5790)\n\n* chromium-browser: Type confusion in V8 (CVE-2019-5791)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5792)\n\n* chromium-browser: Excessive permissions for private API in Extensions (CVE-2019-5793)\n\n* chromium-browser: Security UI spoofing (CVE-2019-5794)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5795)\n\n* chromium-browser: Race condition in Extensions (CVE-2019-5796)\n\n* chromium-browser: Race condition in DOMStorage (CVE-2019-5797)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* chromium-browser: CSP bypass with blob URL (CVE-2019-5799)\n\n* chromium-browser: CSP bypass with blob URL (CVE-2019-5800)\n\n* chromium-browser: Security UI spoofing (CVE-2019-5802)\n\n* chromium-browser: CSP bypass with Javascript URLs (CVE-2019-5803)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:0708",
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1688189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688189"
},
{
"category": "external",
"summary": "1688190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688190"
},
{
"category": "external",
"summary": "1688191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688191"
},
{
"category": "external",
"summary": "1688192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688192"
},
{
"category": "external",
"summary": "1688193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688193"
},
{
"category": "external",
"summary": "1688194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688194"
},
{
"category": "external",
"summary": "1688195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688195"
},
{
"category": "external",
"summary": "1688196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688196"
},
{
"category": "external",
"summary": "1688197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688197"
},
{
"category": "external",
"summary": "1688198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688198"
},
{
"category": "external",
"summary": "1688199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688199"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1688201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688201"
},
{
"category": "external",
"summary": "1688202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688202"
},
{
"category": "external",
"summary": "1688204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688204"
},
{
"category": "external",
"summary": "1688205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688205"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0708.json"
}
],
"title": "Red Hat Security Advisory: chromium-browser security update",
"tracking": {
"current_release_date": "2024-11-15T08:23:01+00:00",
"generator": {
"date": "2024-11-15T08:23:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:0708",
"initial_release_date": "2019-04-08T07:48:59+00:00",
"revision_history": [
{
"date": "2019-04-08T07:48:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-04-08T07:48:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T08:23:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product_id": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@73.0.3683.75-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product_id": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@73.0.3683.75-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product_id": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@73.0.3683.75-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product_id": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@73.0.3683.75-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5787",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688189"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in Canvas",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5787"
},
{
"category": "external",
"summary": "RHBZ#1688189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688189"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5787",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5787"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5787",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5787"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in Canvas"
},
{
"cve": "CVE-2019-5788",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688190"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in FileAPI",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5788"
},
{
"category": "external",
"summary": "RHBZ#1688190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5788",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5788"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5788",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5788"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in FileAPI"
},
{
"cve": "CVE-2019-5789",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688191"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in WebMIDI",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5789"
},
{
"category": "external",
"summary": "RHBZ#1688191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688191"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5789",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5789"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in WebMIDI"
},
{
"cve": "CVE-2019-5790",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688192"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Heap buffer overflow in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5790"
},
{
"category": "external",
"summary": "RHBZ#1688192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688192"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5790",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5790"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Heap buffer overflow in V8"
},
{
"cve": "CVE-2019-5791",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688193"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Type confusion in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5791"
},
{
"category": "external",
"summary": "RHBZ#1688193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688193"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5791",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5791"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Type confusion in V8"
},
{
"cve": "CVE-2019-5792",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688194"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5792"
},
{
"category": "external",
"summary": "RHBZ#1688194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5792",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5792"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5792",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5792"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5793",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688195"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Excessive permissions for private API in Extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5793"
},
{
"category": "external",
"summary": "RHBZ#1688195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688195"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5793",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5793"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5793",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5793"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Excessive permissions for private API in Extensions"
},
{
"cve": "CVE-2019-5794",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688196"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Security UI spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5794"
},
{
"category": "external",
"summary": "RHBZ#1688196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5794",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5794"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Security UI spoofing"
},
{
"cve": "CVE-2019-5795",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688197"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5795"
},
{
"category": "external",
"summary": "RHBZ#1688197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5795"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5796",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688198"
}
],
"notes": [
{
"category": "description",
"text": "Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Race condition in Extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5796"
},
{
"category": "external",
"summary": "RHBZ#1688198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688198"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5796",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5796"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Race condition in Extensions"
},
{
"cve": "CVE-2019-5797",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688199"
}
],
"notes": [
{
"category": "description",
"text": "Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Race condition in DOMStorage",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5797"
},
{
"category": "external",
"summary": "RHBZ#1688199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5797"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Race condition in DOMStorage"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-5799",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688201"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect inheritance of a new document\u0027s policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with blob URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5799"
},
{
"category": "external",
"summary": "RHBZ#1688201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688201"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5799",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5799"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: CSP bypass with blob URL"
},
{
"cve": "CVE-2019-5800",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688202"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with blob URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5800"
},
{
"category": "external",
"summary": "RHBZ#1688202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5800"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: CSP bypass with blob URL"
},
{
"cve": "CVE-2019-5802",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688204"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Security UI spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5802"
},
{
"category": "external",
"summary": "RHBZ#1688204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5802",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5802"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5802",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5802"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Security UI spoofing"
},
{
"cve": "CVE-2019-5803",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688205"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with Javascript URLs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5803"
},
{
"category": "external",
"summary": "RHBZ#1688205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5803",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5803"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5803",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5803"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: CSP bypass with Javascript URLs"
}
]
}
RHSA-2019:0708
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 73.0.3683.75.\n\nSecurity Fix(es):\n\n* chromium-browser: Use after free in Canvas (CVE-2019-5787)\n\n* chromium-browser: Use after free in FileAPI (CVE-2019-5788)\n\n* chromium-browser: Use after free in WebMIDI (CVE-2019-5789)\n\n* chromium-browser: Heap buffer overflow in V8 (CVE-2019-5790)\n\n* chromium-browser: Type confusion in V8 (CVE-2019-5791)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5792)\n\n* chromium-browser: Excessive permissions for private API in Extensions (CVE-2019-5793)\n\n* chromium-browser: Security UI spoofing (CVE-2019-5794)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5795)\n\n* chromium-browser: Race condition in Extensions (CVE-2019-5796)\n\n* chromium-browser: Race condition in DOMStorage (CVE-2019-5797)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* chromium-browser: CSP bypass with blob URL (CVE-2019-5799)\n\n* chromium-browser: CSP bypass with blob URL (CVE-2019-5800)\n\n* chromium-browser: Security UI spoofing (CVE-2019-5802)\n\n* chromium-browser: CSP bypass with Javascript URLs (CVE-2019-5803)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:0708",
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1688189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688189"
},
{
"category": "external",
"summary": "1688190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688190"
},
{
"category": "external",
"summary": "1688191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688191"
},
{
"category": "external",
"summary": "1688192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688192"
},
{
"category": "external",
"summary": "1688193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688193"
},
{
"category": "external",
"summary": "1688194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688194"
},
{
"category": "external",
"summary": "1688195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688195"
},
{
"category": "external",
"summary": "1688196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688196"
},
{
"category": "external",
"summary": "1688197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688197"
},
{
"category": "external",
"summary": "1688198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688198"
},
{
"category": "external",
"summary": "1688199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688199"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1688201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688201"
},
{
"category": "external",
"summary": "1688202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688202"
},
{
"category": "external",
"summary": "1688204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688204"
},
{
"category": "external",
"summary": "1688205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688205"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0708.json"
}
],
"title": "Red Hat Security Advisory: chromium-browser security update",
"tracking": {
"current_release_date": "2025-10-10T02:11:22+00:00",
"generator": {
"date": "2025-10-10T02:11:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:0708",
"initial_release_date": "2019-04-08T07:48:59+00:00",
"revision_history": [
{
"date": "2019-04-08T07:48:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-04-08T07:48:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-10T02:11:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product_id": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@73.0.3683.75-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product_id": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@73.0.3683.75-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product_id": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@73.0.3683.75-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product_id": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@73.0.3683.75-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5787",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688189"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in Canvas",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5787"
},
{
"category": "external",
"summary": "RHBZ#1688189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688189"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5787",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5787"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5787",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5787"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in Canvas"
},
{
"cve": "CVE-2019-5788",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688190"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in FileAPI",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5788"
},
{
"category": "external",
"summary": "RHBZ#1688190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5788",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5788"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5788",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5788"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in FileAPI"
},
{
"cve": "CVE-2019-5789",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688191"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in WebMIDI",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5789"
},
{
"category": "external",
"summary": "RHBZ#1688191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688191"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5789",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5789"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in WebMIDI"
},
{
"cve": "CVE-2019-5790",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688192"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Heap buffer overflow in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5790"
},
{
"category": "external",
"summary": "RHBZ#1688192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688192"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5790",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5790"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Heap buffer overflow in V8"
},
{
"cve": "CVE-2019-5791",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688193"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Type confusion in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5791"
},
{
"category": "external",
"summary": "RHBZ#1688193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688193"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5791",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5791"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Type confusion in V8"
},
{
"cve": "CVE-2019-5792",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688194"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5792"
},
{
"category": "external",
"summary": "RHBZ#1688194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5792",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5792"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5792",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5792"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5793",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688195"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Excessive permissions for private API in Extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5793"
},
{
"category": "external",
"summary": "RHBZ#1688195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688195"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5793",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5793"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5793",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5793"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Excessive permissions for private API in Extensions"
},
{
"cve": "CVE-2019-5794",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688196"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Security UI spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5794"
},
{
"category": "external",
"summary": "RHBZ#1688196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5794",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5794"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Security UI spoofing"
},
{
"cve": "CVE-2019-5795",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688197"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5795"
},
{
"category": "external",
"summary": "RHBZ#1688197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5795"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5796",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688198"
}
],
"notes": [
{
"category": "description",
"text": "Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Race condition in Extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5796"
},
{
"category": "external",
"summary": "RHBZ#1688198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688198"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5796",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5796"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Race condition in Extensions"
},
{
"cve": "CVE-2019-5797",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688199"
}
],
"notes": [
{
"category": "description",
"text": "Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Race condition in DOMStorage",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5797"
},
{
"category": "external",
"summary": "RHBZ#1688199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5797"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Race condition in DOMStorage"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-5799",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688201"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect inheritance of a new document\u0027s policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with blob URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5799"
},
{
"category": "external",
"summary": "RHBZ#1688201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688201"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5799",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5799"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: CSP bypass with blob URL"
},
{
"cve": "CVE-2019-5800",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688202"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with blob URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5800"
},
{
"category": "external",
"summary": "RHBZ#1688202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5800"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: CSP bypass with blob URL"
},
{
"cve": "CVE-2019-5802",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688204"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Security UI spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5802"
},
{
"category": "external",
"summary": "RHBZ#1688204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5802",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5802"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5802",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5802"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Security UI spoofing"
},
{
"cve": "CVE-2019-5803",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688205"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with Javascript URLs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5803"
},
{
"category": "external",
"summary": "RHBZ#1688205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5803",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5803"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5803",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5803"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: CSP bypass with Javascript URLs"
}
]
}
rhsa-2019:1310
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1310",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1310.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:39+00:00",
"generator": {
"date": "2025-10-09T18:21:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1310",
"initial_release_date": "2019-06-03T20:55:59+00:00",
"revision_history": [
{
"date": "2019-06-03T20:55:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:55:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.i686",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686",
"product_id": "thunderbird-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.src",
"product_id": "thunderbird-0:60.7.0-1.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product_id": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product_id": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019:1267
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1267",
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1267.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:36+00:00",
"generator": {
"date": "2025-10-09T18:21:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1267",
"initial_release_date": "2019-05-23T15:53:40+00:00",
"revision_history": [
{
"date": "2019-05-23T15:53:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T15:53:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64",
"product_id": "firefox-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.i686",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.i686",
"product_id": "firefox-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.src",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.src",
"product_id": "firefox-0:60.7.0-1.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.s390x",
"product_id": "firefox-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64",
"product_id": "firefox-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
RHSA-2019:1269
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1269",
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1269.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:36+00:00",
"generator": {
"date": "2025-10-09T18:21:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1269",
"initial_release_date": "2019-05-23T16:08:37+00:00",
"revision_history": [
{
"date": "2019-05-23T16:08:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T16:08:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.src",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.src",
"product_id": "firefox-0:60.7.0-1.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
RHSA-2019:1265
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1265",
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1265.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:36+00:00",
"generator": {
"date": "2025-10-09T18:21:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1265",
"initial_release_date": "2019-05-23T15:42:35+00:00",
"revision_history": [
{
"date": "2019-05-23T15:42:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T15:42:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64",
"product_id": "firefox-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.src",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.src",
"product_id": "firefox-0:60.7.0-1.el7_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.i686",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.i686",
"product_id": "firefox-0:60.7.0-1.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.s390x",
"product_id": "firefox-0:60.7.0-1.el7_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.ppc64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64",
"product_id": "firefox-0:60.7.0-1.el7_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product_id": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64",
"product_id": "firefox-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
RHSA-2019:1309
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1309",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1309.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:38+00:00",
"generator": {
"date": "2025-10-09T18:21:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1309",
"initial_release_date": "2019-06-03T20:55:50+00:00",
"revision_history": [
{
"date": "2019-06-03T20:55:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:55:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product_id": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.src",
"product_id": "thunderbird-0:60.7.0-1.el7_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product_id": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
RHSA-2019:1310
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1310",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1310.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:39+00:00",
"generator": {
"date": "2025-10-09T18:21:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1310",
"initial_release_date": "2019-06-03T20:55:59+00:00",
"revision_history": [
{
"date": "2019-06-03T20:55:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:55:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.i686",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686",
"product_id": "thunderbird-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.src",
"product_id": "thunderbird-0:60.7.0-1.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product_id": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product_id": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019:1309
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1309",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1309.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:38+00:00",
"generator": {
"date": "2025-10-09T18:21:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1309",
"initial_release_date": "2019-06-03T20:55:50+00:00",
"revision_history": [
{
"date": "2019-06-03T20:55:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:55:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product_id": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.src",
"product_id": "thunderbird-0:60.7.0-1.el7_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product_id": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019_1269
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1269",
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1269.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2024-11-22T13:19:29+00:00",
"generator": {
"date": "2024-11-22T13:19:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1269",
"initial_release_date": "2019-05-23T16:08:37+00:00",
"revision_history": [
{
"date": "2019-05-23T16:08:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T16:08:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:19:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.src",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.src",
"product_id": "firefox-0:60.7.0-1.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019:0708
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 73.0.3683.75.\n\nSecurity Fix(es):\n\n* chromium-browser: Use after free in Canvas (CVE-2019-5787)\n\n* chromium-browser: Use after free in FileAPI (CVE-2019-5788)\n\n* chromium-browser: Use after free in WebMIDI (CVE-2019-5789)\n\n* chromium-browser: Heap buffer overflow in V8 (CVE-2019-5790)\n\n* chromium-browser: Type confusion in V8 (CVE-2019-5791)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5792)\n\n* chromium-browser: Excessive permissions for private API in Extensions (CVE-2019-5793)\n\n* chromium-browser: Security UI spoofing (CVE-2019-5794)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5795)\n\n* chromium-browser: Race condition in Extensions (CVE-2019-5796)\n\n* chromium-browser: Race condition in DOMStorage (CVE-2019-5797)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* chromium-browser: CSP bypass with blob URL (CVE-2019-5799)\n\n* chromium-browser: CSP bypass with blob URL (CVE-2019-5800)\n\n* chromium-browser: Security UI spoofing (CVE-2019-5802)\n\n* chromium-browser: CSP bypass with Javascript URLs (CVE-2019-5803)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:0708",
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1688189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688189"
},
{
"category": "external",
"summary": "1688190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688190"
},
{
"category": "external",
"summary": "1688191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688191"
},
{
"category": "external",
"summary": "1688192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688192"
},
{
"category": "external",
"summary": "1688193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688193"
},
{
"category": "external",
"summary": "1688194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688194"
},
{
"category": "external",
"summary": "1688195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688195"
},
{
"category": "external",
"summary": "1688196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688196"
},
{
"category": "external",
"summary": "1688197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688197"
},
{
"category": "external",
"summary": "1688198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688198"
},
{
"category": "external",
"summary": "1688199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688199"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1688201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688201"
},
{
"category": "external",
"summary": "1688202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688202"
},
{
"category": "external",
"summary": "1688204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688204"
},
{
"category": "external",
"summary": "1688205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688205"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0708.json"
}
],
"title": "Red Hat Security Advisory: chromium-browser security update",
"tracking": {
"current_release_date": "2025-10-10T02:11:22+00:00",
"generator": {
"date": "2025-10-10T02:11:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:0708",
"initial_release_date": "2019-04-08T07:48:59+00:00",
"revision_history": [
{
"date": "2019-04-08T07:48:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-04-08T07:48:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-10T02:11:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product_id": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@73.0.3683.75-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product_id": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@73.0.3683.75-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product_id": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser@73.0.3683.75-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product_id": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/chromium-browser-debuginfo@73.0.3683.75-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
},
"product_reference": "chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5787",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688189"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in Canvas",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5787"
},
{
"category": "external",
"summary": "RHBZ#1688189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688189"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5787",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5787"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5787",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5787"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in Canvas"
},
{
"cve": "CVE-2019-5788",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688190"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in FileAPI",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5788"
},
{
"category": "external",
"summary": "RHBZ#1688190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5788",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5788"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5788",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5788"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in FileAPI"
},
{
"cve": "CVE-2019-5789",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688191"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in WebMIDI",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5789"
},
{
"category": "external",
"summary": "RHBZ#1688191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688191"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5789",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5789"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in WebMIDI"
},
{
"cve": "CVE-2019-5790",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688192"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Heap buffer overflow in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5790"
},
{
"category": "external",
"summary": "RHBZ#1688192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688192"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5790",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5790"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Heap buffer overflow in V8"
},
{
"cve": "CVE-2019-5791",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688193"
}
],
"notes": [
{
"category": "description",
"text": "Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Type confusion in V8",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5791"
},
{
"category": "external",
"summary": "RHBZ#1688193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688193"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5791",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5791"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Type confusion in V8"
},
{
"cve": "CVE-2019-5792",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688194"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5792"
},
{
"category": "external",
"summary": "RHBZ#1688194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5792",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5792"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5792",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5792"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5793",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688195"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Excessive permissions for private API in Extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5793"
},
{
"category": "external",
"summary": "RHBZ#1688195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688195"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5793",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5793"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5793",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5793"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Excessive permissions for private API in Extensions"
},
{
"cve": "CVE-2019-5794",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688196"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Security UI spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5794"
},
{
"category": "external",
"summary": "RHBZ#1688196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5794",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5794"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5794"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Security UI spoofing"
},
{
"cve": "CVE-2019-5795",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688197"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Integer overflow in PDFium",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5795"
},
{
"category": "external",
"summary": "RHBZ#1688197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5795"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Integer overflow in PDFium"
},
{
"cve": "CVE-2019-5796",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688198"
}
],
"notes": [
{
"category": "description",
"text": "Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Race condition in Extensions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5796"
},
{
"category": "external",
"summary": "RHBZ#1688198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688198"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5796",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5796"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Race condition in Extensions"
},
{
"cve": "CVE-2019-5797",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688199"
}
],
"notes": [
{
"category": "description",
"text": "Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Race condition in DOMStorage",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5797"
},
{
"category": "external",
"summary": "RHBZ#1688199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5797"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Race condition in DOMStorage"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-5799",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688201"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect inheritance of a new document\u0027s policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with blob URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5799"
},
{
"category": "external",
"summary": "RHBZ#1688201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688201"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5799",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5799"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: CSP bypass with blob URL"
},
{
"cve": "CVE-2019-5800",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688202"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with blob URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5800"
},
{
"category": "external",
"summary": "RHBZ#1688202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5800"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: CSP bypass with blob URL"
},
{
"cve": "CVE-2019-5802",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688204"
}
],
"notes": [
{
"category": "description",
"text": "Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Security UI spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5802"
},
{
"category": "external",
"summary": "RHBZ#1688204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5802",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5802"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5802",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5802"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Security UI spoofing"
},
{
"cve": "CVE-2019-5803",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688205"
}
],
"notes": [
{
"category": "description",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: CSP bypass with Javascript URLs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5803"
},
{
"category": "external",
"summary": "RHBZ#1688205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5803",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5803"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5803",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5803"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-04-08T07:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:0708"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-0:73.0.3683.75-1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "chromium-browser: CSP bypass with Javascript URLs"
}
]
}
rhsa-2019:1269
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1269",
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1269.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:36+00:00",
"generator": {
"date": "2025-10-09T18:21:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1269",
"initial_release_date": "2019-05-23T16:08:37+00:00",
"revision_history": [
{
"date": "2019-05-23T16:08:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T16:08:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_id": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debugsource@60.7.0-1.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el8_0.src",
"product": {
"name": "firefox-0:60.7.0-1.el8_0.src",
"product_id": "firefox-0:60.7.0-1.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "firefox-debugsource-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T16:08:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1269"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:firefox-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.aarch64",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.s390x",
"AppStream-8.0.0.Z:firefox-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019:1265
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1265",
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1265.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2025-10-09T18:21:36+00:00",
"generator": {
"date": "2025-10-09T18:21:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2019:1265",
"initial_release_date": "2019-05-23T15:42:35+00:00",
"revision_history": [
{
"date": "2019-05-23T15:42:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T15:42:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T18:21:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64",
"product_id": "firefox-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.src",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.src",
"product_id": "firefox-0:60.7.0-1.el7_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.i686",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.i686",
"product_id": "firefox-0:60.7.0-1.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.s390x",
"product_id": "firefox-0:60.7.0-1.el7_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.ppc64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64",
"product_id": "firefox-0:60.7.0-1.el7_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product_id": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64",
"product_id": "firefox-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019_1309
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1309",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1309.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2024-11-22T13:19:55+00:00",
"generator": {
"date": "2024-11-22T13:19:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1309",
"initial_release_date": "2019-06-03T20:55:50+00:00",
"revision_history": [
{
"date": "2019-06-03T20:55:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:55:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:19:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product_id": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.src",
"product_id": "thunderbird-0:60.7.0-1.el7_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el7_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product_id": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el7_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Server-optional-Alt-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-Alt-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:thunderbird-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:thunderbird-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019_1265
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1265",
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1265.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2024-11-22T13:19:35+00:00",
"generator": {
"date": "2024-11-22T13:19:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1265",
"initial_release_date": "2019-05-23T15:42:35+00:00",
"revision_history": [
{
"date": "2019-05-23T15:42:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T15:42:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:19:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64",
"product_id": "firefox-0:60.7.0-1.el7_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.src",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.src",
"product_id": "firefox-0:60.7.0-1.el7_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.i686",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.i686",
"product_id": "firefox-0:60.7.0-1.el7_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.s390x",
"product_id": "firefox-0:60.7.0-1.el7_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.ppc64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64",
"product_id": "firefox-0:60.7.0-1.el7_6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product_id": "firefox-0:60.7.0-1.el7_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el7_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el7_6.aarch64",
"product": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64",
"product_id": "firefox-0:60.7.0-1.el7_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el7_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Client-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-Alt-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Server-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.src",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.6.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:42:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1265"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Client-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Client-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-Alt-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-Alt-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Server-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Server-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.src",
"7Workstation-optional-7.6.Z:firefox-0:60.7.0-1.el7_6.x86_64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.aarch64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.i686",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.ppc64le",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.s390x",
"7Workstation-optional-7.6.Z:firefox-debuginfo-0:60.7.0-1.el7_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019_1267
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for firefox is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1267",
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1267.json"
}
],
"title": "Red Hat Security Advisory: firefox security update",
"tracking": {
"current_release_date": "2024-11-22T13:19:41+00:00",
"generator": {
"date": "2024-11-22T13:19:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1267",
"initial_release_date": "2019-05-23T15:53:40+00:00",
"revision_history": [
{
"date": "2019-05-23T15:53:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-05-23T15:53:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:19:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64",
"product_id": "firefox-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.i686",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.i686",
"product_id": "firefox-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.src",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.src",
"product_id": "firefox-0:60.7.0-1.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.s390x",
"product_id": "firefox-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "firefox-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64",
"product_id": "firefox-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Samuel Gro\u00df"
],
"organization": "Google Project Zero",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9816",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712625"
}
],
"notes": [
{
"category": "description",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Type confusion with object groups and UnboxedObjects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "RHBZ#1712625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Type confusion with object groups and UnboxedObjects"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-05-23T15:53:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
"product_ids": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1267"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
"6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019_1310
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1310",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1310.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2024-11-22T13:20:02+00:00",
"generator": {
"date": "2024-11-22T13:20:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1310",
"initial_release_date": "2019-06-03T20:55:59+00:00",
"revision_history": [
{
"date": "2019-06-03T20:55:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:55:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:20:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.i686",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686",
"product_id": "thunderbird-0:60.7.0-1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.src",
"product_id": "thunderbird-0:60.7.0-1.el6_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product_id": "thunderbird-0:60.7.0-1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el6_10?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product_id": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el6_10?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:55:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Client-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Client-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Server-optional-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Server-optional-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.src",
"6Workstation-6.10.z:thunderbird-0:60.7.0-1.el6_10.x86_64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.i686",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.ppc64",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.s390x",
"6Workstation-6.10.z:thunderbird-debuginfo-0:60.7.0-1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
rhsa-2019_1308
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for thunderbird is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 60.7.0.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2019:1308",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
},
{
"category": "external",
"summary": "1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1308.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2024-11-22T13:19:49+00:00",
"generator": {
"date": "2024-11-22T13:19:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2019:1308",
"initial_release_date": "2019-06-03T20:52:39+00:00",
"revision_history": [
{
"date": "2019-06-03T20:52:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2019-06-03T20:52:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:19:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_id": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debugsource@60.7.0-1.el8_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_id": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debugsource@60.7.0-1.el8_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:60.7.0-1.el8_0.src",
"product": {
"name": "thunderbird-0:60.7.0-1.el8_0.src",
"product_id": "thunderbird-0:60.7.0-1.el8_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@60.7.0-1.el8_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.src",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le"
},
"product_reference": "thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
},
"product_reference": "thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"discovery_date": "2019-02-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1676997"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "RHBZ#1676997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
}
],
"release_date": "2019-02-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
},
{
"cve": "CVE-2019-5798",
"discovery_date": "2019-03-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1688200"
}
],
"notes": [
{
"category": "description",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Out of bounds read in Skia",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "RHBZ#1688200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"category": "external",
"summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
}
],
"release_date": "2019-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "chromium-browser: Out of bounds read in Skia"
},
{
"cve": "CVE-2019-7317",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1672409"
}
],
"notes": [
{
"category": "description",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libpng: use-after-free in png_image_free in png.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "RHBZ#1672409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
}
],
"release_date": "2019-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libpng: use-after-free in png_image_free in png.c"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"AaylaSecura1138"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9797",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712622"
}
],
"notes": [
{
"category": "description",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Cross-origin theft of images with createImageBitmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "RHBZ#1712622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Cross-origin theft of images with createImageBitmap"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Olli Pettay",
"Bogdan Tara",
"Jan de Mooij",
"Jason Kratzer",
"Jan Varga",
"Gary Kwong",
"Tim Guan-tin Chien",
"Tyson Smith",
"Ronald Crane",
"Ted Campbell"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9800",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712623"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "RHBZ#1712623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Lu\u1eadt Nguy\u1ec5n"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9817",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712626"
}
],
"notes": [
{
"category": "description",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Stealing of cross-domain images using canvas",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "RHBZ#1712626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Stealing of cross-domain images using canvas"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9819",
"cwe": {
"id": "CWE-567",
"name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712628"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Compartment mismatch with fetch API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "RHBZ#1712628",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Compartment mismatch with fetch API"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-9820",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712629"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "RHBZ#1712629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11691",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712617"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free in XMLHttpRequest",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "RHBZ#1712617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free in XMLHttpRequest"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Nils"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11692",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712618"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Use-after-free removing listeners in the event listener manager",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "RHBZ#1712618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Use-after-free removing listeners in the event listener manager"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"crixer"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712619"
}
],
"notes": [
{
"category": "description",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "RHBZ#1712619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla project"
]
},
{
"names": [
"Abdulrahman Alqabandi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2019-11698",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"discovery_date": "2019-05-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1712621"
}
],
"notes": [
{
"category": "description",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "RHBZ#1712621",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
},
{
"category": "external",
"summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
}
],
"release_date": "2019-05-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2019-06-03T20:52:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
"product_ids": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.src",
"AppStream-8.0.0.Z:thunderbird-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debuginfo-0:60.7.0-1.el8_0.x86_64",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.ppc64le",
"AppStream-8.0.0.Z:thunderbird-debugsource-0:60.7.0-1.el8_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
}
]
}
CERTFR-2019-AVI-237
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Mozilla Thunderbird versions antérieures à 60.7 |
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Mozilla Thunderbird versions ant\u00e9rieures \u00e0 60.7",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"name": "CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"name": "CVE-2019-11694",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11694"
},
{
"name": "CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"name": "CVE-2019-9815",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9815"
},
{
"name": "CVE-2019-9818",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9818"
},
{
"name": "CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"name": "CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"name": "CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"name": "CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"name": "CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"name": "CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"name": "CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"name": "CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"name": "CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"name": "CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
}
],
"initial_release_date": "2019-05-23T00:00:00",
"last_revision_date": "2019-05-23T00:00:00",
"links": [],
"reference": "CERTFR-2019-AVI-237",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-05-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Mozilla\nThunderbird. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, un d\u00e9ni de\nservice et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Thunderbird",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2019-15 du 21 mai 2019",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-15/"
}
]
}
CERTFR-2019-AVI-099
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Chrome versions ant\u00e9rieures \u00e0 73.0.3683.75",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-5804",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5804"
},
{
"name": "CVE-2019-5799",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5799"
},
{
"name": "CVE-2019-5797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5797"
},
{
"name": "CVE-2019-5800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5800"
},
{
"name": "CVE-2019-5801",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5801"
},
{
"name": "CVE-2019-5788",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5788"
},
{
"name": "CVE-2019-5792",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5792"
},
{
"name": "CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"name": "CVE-2019-5787",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5787"
},
{
"name": "CVE-2019-5796",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5796"
},
{
"name": "CVE-2019-5791",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5791"
},
{
"name": "CVE-2019-5803",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5803"
},
{
"name": "CVE-2019-5802",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5802"
},
{
"name": "CVE-2019-5790",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5790"
},
{
"name": "CVE-2019-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5795"
},
{
"name": "CVE-2019-5794",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5794"
},
{
"name": "CVE-2019-5789",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5789"
},
{
"name": "CVE-2019-5793",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5793"
}
],
"initial_release_date": "2019-03-13T00:00:00",
"last_revision_date": "2019-03-13T00:00:00",
"links": [],
"reference": "CERTFR-2019-AVI-099",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-03-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Chrome. Elles\npermettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Chrome du 12 mars 2019",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html?utm_source=feedburner\u0026utm_medium=feed\u0026utm_campaign=Feed%3A+GoogleChromeReleases+%28Google+Chrome+Releases%29"
}
]
}
CERTFR-2019-AVI-236
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 67",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 60.7",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-11692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
},
{
"name": "CVE-2019-11693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
},
{
"name": "CVE-2019-11694",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11694"
},
{
"name": "CVE-2019-11691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
},
{
"name": "CVE-2019-9815",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9815"
},
{
"name": "CVE-2019-11701",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11701"
},
{
"name": "CVE-2019-9818",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9818"
},
{
"name": "CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"name": "CVE-2019-11697",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11697"
},
{
"name": "CVE-2018-18511",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
},
{
"name": "CVE-2019-5798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
},
{
"name": "CVE-2019-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
},
{
"name": "CVE-2019-9819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
},
{
"name": "CVE-2019-9814",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9814"
},
{
"name": "CVE-2019-11695",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11695"
},
{
"name": "CVE-2019-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
},
{
"name": "CVE-2019-11698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
},
{
"name": "CVE-2019-11699",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11699"
},
{
"name": "CVE-2019-11700",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11700"
},
{
"name": "CVE-2019-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
},
{
"name": "CVE-2019-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
},
{
"name": "CVE-2019-11696",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11696"
},
{
"name": "CVE-2019-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
},
{
"name": "CVE-2019-9821",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9821"
}
],
"initial_release_date": "2019-05-22T00:00:00",
"last_revision_date": "2019-05-22T00:00:00",
"links": [],
"reference": "CERTFR-2019-AVI-236",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-05-22T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Mozilla Firefox.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, un d\u00e9ni de service et\nun contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2019-13 du 21 mai 2019",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-13/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2019-14 du 21 mai 2019",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
}
]
}
opensuse-su-2019:1534-1
Vulnerability from csaf_opensuse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox fixes the following issues:\n\nMozillaFirefox was updated to 60.7.0esr (boo#1135824 MFSA 2019-14):\n\n* CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext\n* CVE-2019-11691: Use-after-free in XMLHttpRequest\n* CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n* CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n* CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox\n* CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n* CVE-2019-5798: Out-of-bounds read in Skia\n* CVE-2019-7317: Use-after-free in png_image_free of libpng library\n* CVE-2019-9797: Cross-origin theft of images with createImageBitmap\n* CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n* CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n* CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n* CVE-2019-9817: Stealing of cross-domain images using canvas\n* CVE-2019-9818: (Windows only) Use-after-free in crash generation server\n* CVE-2019-9819: Compartment mismatch with fetch API\n* CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n* CVE-2019-9821: Use-after-free in AssertWorkerThread\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1534",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1534-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1534-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YRJRSOQJ2HUXLMXMB5IAGC7CGYVG6MJ7/#YRJRSOQJ2HUXLMXMB5IAGC7CGYVG6MJ7"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1534-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YRJRSOQJ2HUXLMXMB5IAGC7CGYVG6MJ7/#YRJRSOQJ2HUXLMXMB5IAGC7CGYVG6MJ7"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18511 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9821/"
}
],
"title": "Security update for MozillaFirefox",
"tracking": {
"current_release_date": "2019-06-10T09:32:29Z",
"generator": {
"date": "2019-06-10T09:32:29Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1534-1",
"initial_release_date": "2019-06-10T09:32:29Z",
"revision_history": [
{
"date": "2019-06-10T09:32:29Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"product": {
"name": "MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"product_id": "MozillaFirefox-60.7.0-lp150.3.54.5.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"product": {
"name": "MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"product_id": "MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"product": {
"name": "MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"product_id": "MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"product": {
"name": "MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"product_id": "MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"product": {
"name": "MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"product_id": "MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64",
"product": {
"name": "MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64",
"product_id": "MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.0",
"product": {
"name": "openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-60.7.0-lp150.3.54.5.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64"
},
"product_reference": "MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64"
},
"product_reference": "MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64"
},
"product_reference": "MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64"
},
"product_reference": "MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64"
},
"product_reference": "MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
},
"product_reference": "MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18511"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18511",
"url": "https://www.suse.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125396"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "moderate"
}
],
"title": "CVE-2018-18511"
},
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9797"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9797",
"url": "https://www.suse.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "SUSE Bug 1129821 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1129821"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9797"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
},
{
"cve": "CVE-2019-9821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9821"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 67.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9821",
"url": "https://www.suse.com/security/cve/CVE-2019-9821"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9821",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:MozillaFirefox-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-devel-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-common-60.7.0-lp150.3.54.5.x86_64",
"openSUSE Leap 15.0:MozillaFirefox-translations-other-60.7.0-lp150.3.54.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-10T09:32:29Z",
"details": "important"
}
],
"title": "CVE-2019-9821"
}
]
}
opensuse-su-2019:1664-1
Vulnerability from csaf_opensuse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaThunderbird",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaThunderbird fixes the following issues:\n\nMozilla Thunderbird was updated to 60.7.2 / MFSA 2019-20 (boo#1138872):\n * CVE-2019-11707: Type confusion in Array.pop\n * CVE-2019-11708: sandbox escape using Prompt:Open\n\nMozilla Thunderbird was updated to 60.7.1 / MFSA 2019-17 (boo#1137595):\n* CVE-2019-11703: Heap buffer overflow in icalparser.c\n* CVE-2019-11704: Heap buffer overflow in icalvalue.c\n* CVE-2019-11705: Stack buffer overflow in icalrecur.c\n* CVE-2019-11706: Type confusion in icalproperty.c\n\nAlso fixed: No prompt for smartcard PIN when S/MIME signing is used\n\nMozilla Thunderbird was updated to 60.7.0 / MFSA 2019-15 (boo#1135824):\n\n* Attachment pane of Write window no longer focussed when attaching\n files using a keyboard shortcut\n\n* CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n* CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n* CVE-2019-9817: Stealing of cross-domain images using canvas\n* CVE-2019-9818 (Windows only): Use-after-free in crash generation server\n* CVE-2019-9819: Compartment mismatch with fetch API\n* CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n* CVE-2019-11691: Use-after-free in XMLHttpRequest\n* CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n* CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n* CVE-2019-7317: Use-after-free in png_image_free of libpng library\n* CVE-2019-9797: Cross-origin theft of images with createImageBitmap\n* CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext\n* CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox\n* CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n* CVE-2019-5798: Out-of-bounds read in Skia\n* CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n\n- Disable building with LTO (boo#1133267).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1664",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1664-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1664-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZFVBHHF6WMJDJB73NZDWFFGS6D23TB67/#ZFVBHHF6WMJDJB73NZDWFFGS6D23TB67"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1664-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZFVBHHF6WMJDJB73NZDWFFGS6D23TB67/#ZFVBHHF6WMJDJB73NZDWFFGS6D23TB67"
},
{
"category": "self",
"summary": "SUSE Bug 1130694",
"url": "https://bugzilla.suse.com/1130694"
},
{
"category": "self",
"summary": "SUSE Bug 1133267",
"url": "https://bugzilla.suse.com/1133267"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE Bug 1137595",
"url": "https://bugzilla.suse.com/1137595"
},
{
"category": "self",
"summary": "SUSE Bug 1138872",
"url": "https://bugzilla.suse.com/1138872"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18511 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11703 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11704 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11705 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11706 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11706/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11707 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11708 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
}
],
"title": "Security update for MozillaThunderbird",
"tracking": {
"current_release_date": "2019-06-28T08:42:30Z",
"generator": {
"date": "2019-06-28T08:42:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1664-1",
"initial_release_date": "2019-06-28T08:42:30Z",
"revision_history": [
{
"date": "2019-06-28T08:42:30Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.2-85.1.x86_64",
"product": {
"name": "MozillaThunderbird-60.7.2-85.1.x86_64",
"product_id": "MozillaThunderbird-60.7.2-85.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"product": {
"name": "MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"product_id": "MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"product_id": "MozillaThunderbird-translations-common-60.7.2-85.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.2-85.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.2-85.1.x86_64",
"product_id": "MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 12",
"product": {
"name": "SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-60.7.2-85.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64"
},
"product_reference": "MozillaThunderbird-60.7.2-85.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64"
},
"product_reference": "MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-60.7.2-85.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-60.7.2-85.1.x86_64 as component of SUSE Package Hub 12",
"product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-60.7.2-85.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18511"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18511",
"url": "https://www.suse.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125396"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "moderate"
}
],
"title": "CVE-2018-18511"
},
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-11703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11703"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Thunderbird\u0027s implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11703",
"url": "https://www.suse.com/security/cve/CVE-2019-11703"
},
{
"category": "external",
"summary": "SUSE Bug 1137595 for CVE-2019-11703",
"url": "https://bugzilla.suse.com/1137595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "low"
}
],
"title": "CVE-2019-11703"
},
{
"cve": "CVE-2019-11704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11704"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Thunderbird\u0027s implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11704",
"url": "https://www.suse.com/security/cve/CVE-2019-11704"
},
{
"category": "external",
"summary": "SUSE Bug 1137595 for CVE-2019-11704",
"url": "https://bugzilla.suse.com/1137595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "low"
}
],
"title": "CVE-2019-11704"
},
{
"cve": "CVE-2019-11705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11705"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Thunderbird\u0027s implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11705",
"url": "https://www.suse.com/security/cve/CVE-2019-11705"
},
{
"category": "external",
"summary": "SUSE Bug 1137595 for CVE-2019-11705",
"url": "https://bugzilla.suse.com/1137595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "low"
}
],
"title": "CVE-2019-11705"
},
{
"cve": "CVE-2019-11706",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11706"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Thunderbird\u0027s implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain email messages, resulting in a crash. This vulnerability affects Thunderbird \u003c 60.7.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11706",
"url": "https://www.suse.com/security/cve/CVE-2019-11706"
},
{
"category": "external",
"summary": "SUSE Bug 1137595 for CVE-2019-11706",
"url": "https://bugzilla.suse.com/1137595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "low"
}
],
"title": "CVE-2019-11706"
},
{
"cve": "CVE-2019-11707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11707"
}
],
"notes": [
{
"category": "general",
"text": "A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR \u003c 60.7.1, Firefox \u003c 67.0.3, and Thunderbird \u003c 60.7.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11707",
"url": "https://www.suse.com/security/cve/CVE-2019-11707"
},
{
"category": "external",
"summary": "SUSE Bug 1138614 for CVE-2019-11707",
"url": "https://bugzilla.suse.com/1138614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "moderate"
}
],
"title": "CVE-2019-11707"
},
{
"cve": "CVE-2019-11708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11708"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user\u0027s computer. This vulnerability affects Firefox ESR \u003c 60.7.2, Firefox \u003c 67.0.4, and Thunderbird \u003c 60.7.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11708",
"url": "https://www.suse.com/security/cve/CVE-2019-11708"
},
{
"category": "external",
"summary": "SUSE Bug 1138872 for CVE-2019-11708",
"url": "https://bugzilla.suse.com/1138872"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "critical"
}
],
"title": "CVE-2019-11708"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9797"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9797",
"url": "https://www.suse.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "SUSE Bug 1129821 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1129821"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-9797"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12:MozillaThunderbird-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-buildsymbols-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-common-60.7.2-85.1.x86_64",
"SUSE Package Hub 12:MozillaThunderbird-translations-other-60.7.2-85.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T08:42:30Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
}
]
}
opensuse-su-2024:12948-1
Vulnerability from csaf_opensuse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ungoogled-chromium-113.0.5672.92-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-12948",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12948-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3015 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3016 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3017 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3018 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3019 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3020 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3021 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3022 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3023 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3024 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3025 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3026 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3027 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3031 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3031/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3032 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3033 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3034 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3034/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3035 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3036 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3036/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3037 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3038 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3039 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3040 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3041 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3042 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3043 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3044 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3045 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3046 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3047 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3049 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3049/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3050 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3051 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3052 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3053 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3054 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3055 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3056 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3057 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3058 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3059 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3060 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3061 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3062 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3063 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3064 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3065 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3066 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3067 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3068 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3069 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3070 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3071 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3072 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3072/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3073 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3074 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3075 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3076 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3077 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3078 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3079 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3080 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3081 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3083 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3084 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3084/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3085 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3086 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3087 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3088 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3089 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3090 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3091 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3092 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3093 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3094 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3094/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3095 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3096 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3098 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3100 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3101 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3102 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3903 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3904 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3905 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3906 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3907 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3908 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3909 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3909/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3910 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3911 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3912 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3914 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3915 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3916 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3917 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3919 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3921 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3922 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3924 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3925 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3925/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3926 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3927 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3928 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3953 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3954 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3955 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3956 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3957 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3958 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3959 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3960 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3961 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3962 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3963 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3964 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3965 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3966 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3967 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3968 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3969 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3970 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3971 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3972 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-1521 page",
"url": "https://www.suse.com/security/cve/CVE-2012-1521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2807 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2815 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2817 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2818 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2819 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2820 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2821 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2823 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2825 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2826 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2829 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2830 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2831 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2834 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2842 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2843 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2865 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2865/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2866 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2866/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2867 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2867/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2868 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2869 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2870 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2871 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2871/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2872 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2872/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2874 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2876 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2877 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2878 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2879 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2880 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2881 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2882 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2883 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2884 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2885 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2886 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2886/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2887 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2888 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2889 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2891 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2891/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2892 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2893 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2894 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2896 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5130 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5132 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5133 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5134 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5135 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5136 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5137 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5138 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5139 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5140 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5141 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5142 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5143 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5144 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5145 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5146 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5147 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5148 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5149 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5150 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5152 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5153 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5154 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0830 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0831 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0832 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0833 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0834 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0835 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0836 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0837 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0837/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0838 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0879 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0880 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0881 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0882 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0883 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0884 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0885 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0886 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0886/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0887 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0888 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0889 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0890 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0891 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0891/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0892 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0893 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0894 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0895 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0895/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0896 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0897 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0898 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0898/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0899 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0900 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2838 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2906 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2907 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2908 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2909 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2909/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2910 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2911 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2912 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2913 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2914 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2915 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2916 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2917 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2918 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2918/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2919 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2920 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2920/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2921 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2922 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2923 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2924 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2925 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2925/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2926 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2927 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2928 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2931 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6621 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6622 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6623 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6624 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6624/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6625 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6626 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6626/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6627 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6627/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6628 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6628/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6629 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6630 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6631 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6632 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6634 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6635 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6636 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6637 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6638 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6639 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6640 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6641 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6643 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6644 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6645 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6646 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6649 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6650 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6653 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6654 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6655 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6656 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6657 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6658 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6659 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6660 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6661 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0574 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1700 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1701 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1702 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1702/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1703 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1704 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1705 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1713 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1714 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1715 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1716 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1717 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1718 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1719 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1719/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1720 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1720/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1721 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1722 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1723 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1724 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1725 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1726 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1727 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1728 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1729 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1730 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1731 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1731/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1732 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1733 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1734 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1734/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1735 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1735/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1740 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1741 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1742 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1742/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1743 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1744 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1745 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1746 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1747 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1748 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1749 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3152 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3154 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3155 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3156 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3157 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3160 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3162 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3165 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3166 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3167 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3167/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3168 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3169 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3170 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3171 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3172 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3173 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3174 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3175 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3176 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3178 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3188 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3189 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3190 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3191 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3192 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3192/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3193 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3194 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3195 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3196 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3197 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3198 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3199 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3200 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7899 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7900 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7901 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7902 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7902/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7903 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7904 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7905 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7906 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7907 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7908 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7909 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7909/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7910 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7923 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7924 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7925 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7925/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7926 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7927 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7928 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7929 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7930 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7932 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7933 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7934 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7935 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7936 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7937 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7938 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7939 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7939/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7940 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7941 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7942 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7943 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7944 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7945 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7946 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7947 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7948 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1205 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1205/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1209 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1210 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1211 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1212 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1213 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1214 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1215 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1216 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1217 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1218 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1219 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1220 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1221 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1222 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1223 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1224 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1225 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1226 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1227 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1228 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1229 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1230 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1231 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1233 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1234 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1235 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1236 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1237 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1238 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1240 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1241 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1242 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1243 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1244 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1245 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1245/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1246 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1246/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1247 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1247/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1248 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1248/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1249 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1249/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1250 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1250/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1251 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1251/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1252 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1253 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1253/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1254 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1255 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1255/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1256 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1256/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1257 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1257/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1258 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1258/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1259 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1259/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1260 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1260/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1261 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1261/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1262 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1263 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1263/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1264 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1264/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1265 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1265/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1266 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1266/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1267 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1267/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1268 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1268/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1269 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1269/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1270 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1271 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1271/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1272 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1272/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1273 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1273/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1274 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1274/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1275 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1275/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1276 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1277 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1277/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1278 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1279 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1279/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1280 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1280/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1281 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1281/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1282 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1283 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1284 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1284/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1285 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1286 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1286/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1287 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1287/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1288 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1288/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1289 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1291 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1292 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1292/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1293 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1293/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1294 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1294/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1295 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1296 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1297 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1298 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1299 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1300 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1301 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1301/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1302 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1303 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1304 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6755 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6756 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6757 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6758 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6759 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6760 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6761 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6762 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6763 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6764 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6765 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6766 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6767 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6768 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6768/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6769 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6770 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6771 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6772 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6773 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6774 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6775 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6776 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6777 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6778 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6779 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6780 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6781 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6782 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6783 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6784 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6784/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6785 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6786 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6787 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6788 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6789 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6790 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6791 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6792 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7834 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8126 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1612 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1612/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1613 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1614 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1615 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1616 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1617 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1618 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1619 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1620 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1622 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1623 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1624 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1624/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1625 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1626 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1626/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1627 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1627/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1629 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1630 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1631 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1632 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1633 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1633/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1634 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1635 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1636 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1637 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1638 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1639 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1640 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1641 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1642 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1643 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1644 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1645 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1646 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1647 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1647/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1648 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1649 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1650 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1651 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1652 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1653 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1654 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1655 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1656 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1657 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1658 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1659 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1660 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1661 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1662 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1663 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1664 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1665 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1666 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1666/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1667 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1668 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1668/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1669 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1669/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1670 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1672 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1673 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1673/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1674 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1675 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1676 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1677 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1678 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1679 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1680 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1681 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1682 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1682/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1683 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1684 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1684/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1685 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1686 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1686/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1687 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1688 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1689 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1689/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1690 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1691 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1692 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1693 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1694 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1695 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1696 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1696/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1697 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1697/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1698 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1699 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1699/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1700 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1701 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1702 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1702/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1703 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1704 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1705 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1706 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1706/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1707 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1708 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1709 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1710 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1710/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1711 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1711/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3679 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5127 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5128 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5129 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5130 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5132 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5133 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5134 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5135 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5136 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5137 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5139 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5140 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5141 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5142 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5143 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5144 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5145 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5146 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5147 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5148 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5149 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5150 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5151 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5152 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5153 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5154 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5155 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5156 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5157 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5158 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5159 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5160 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5161 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5162 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5163 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5164 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5165 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5166 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5170 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5171 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5172 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5173 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5174 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5175 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5177 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5178 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5181 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5182 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5184 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5185 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5186 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5187 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5188 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5189 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5190 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5191 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5192 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5192/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5193 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5198 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5199 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5200 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5201 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5202 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5204 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5211 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5217 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5222 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5224 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9651 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-11215 page",
"url": "https://www.suse.com/security/cve/CVE-2017-11215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-11225 page",
"url": "https://www.suse.com/security/cve/CVE-2017-11225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15386 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15386/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15387 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15388 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15389 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15390 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15391 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15392 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15393 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15394 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15394/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15395 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15395/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15396 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15396/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15398 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15399 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15407 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15408 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15409 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15409/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15410 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15411 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15411/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15412 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15413 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15413/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15415 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15415/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15416 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15416/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15417 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15418 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15419 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15420 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15420/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15422 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15423 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15423/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15424 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15425 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15425/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15426 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15427 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15429 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15430 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5006 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5007 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5008 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5008/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5009 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5010 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5011 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5012 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5013 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5014 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5015 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5016 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5017 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5018 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5019 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5020 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5021 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5022 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5023 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5024 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5025 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5026 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5030 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5035 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5041 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5044 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5052 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5053 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5054 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5055 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5056 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5057 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5058 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5059 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5060 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5061 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5062 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5063 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5064 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5065 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5066 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5067 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5068 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5069 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5070 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5071 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5072 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5072/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5073 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5074 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5075 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5076 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5077 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5078 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5079 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5080 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5081 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5082 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5083 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5085 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5086 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5087 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5088 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5089 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5091 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5092 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5093 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5094 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5094/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5095 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5096 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5097 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5098 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5099 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5100 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5101 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5102 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5103 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5104 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5105 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5106 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5107 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5108 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5109 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5110 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5111 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5112 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5113 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5114 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5115 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5116 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5117 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5118 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5119 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5119/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5120 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5121 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5122 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5124 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5125 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5126 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5127 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5128 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5129 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5130 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5132 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5133 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7000 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16065 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16066 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16067 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16068 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16069 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16070 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16071 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16073 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16074 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16075 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16076 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16077 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16078 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16079 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16080 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16081 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16082 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16083 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16084 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16084/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16085 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16086 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16087 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16088 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17462 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17463 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17464 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17465 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17466 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17467 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17468 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17469 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17470 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17470/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17471 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17472 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17473 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17474 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17474/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17475 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17475/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17476 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17477 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17478 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17478/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17479 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17480 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17481 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18335 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18335/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18336 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18336/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18337 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18337/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18338 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18339 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18339/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18340 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18340/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18341 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18342 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18342/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18343 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18343/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18344 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18344/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18345 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18346 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18346/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18347 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18348 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18349 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18350 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18350/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18351 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18351/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18352 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18353 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18354 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18354/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18355 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18355/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18356 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18357 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18357/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18358 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18358/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18359 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18359/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20073 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-4117 page",
"url": "https://www.suse.com/security/cve/CVE-2018-4117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5179 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6031 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6031/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6032 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6033 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6034 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6034/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6035 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6036 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6036/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6037 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6038 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6039 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6040 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6041 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6042 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6043 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6044 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6045 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6046 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6047 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6048 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6049 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6049/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6050 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6051 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6052 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6053 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6054 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6056 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6057 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6060 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6061 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6062 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6063 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6064 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6065 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6066 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6067 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6068 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6069 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6070 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6071 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6072 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6072/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6073 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6074 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6075 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6076 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6077 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6078 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6079 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6080 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6081 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6082 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6083 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6085 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6086 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6087 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6088 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6089 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6090 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6091 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6092 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6093 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6094 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6094/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6095 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6096 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6097 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6098 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6099 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6100 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6101 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6102 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6103 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6104 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6105 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6106 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6107 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6108 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6109 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6110 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6111 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6112 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6113 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6114 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6115 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6116 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6117 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6118 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6120 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6121 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6122 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6123 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6124 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6125 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6126 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6127 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6128 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6129 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6130 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6131 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6132 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6133 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6134 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6135 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6137 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6138 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6140 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6141 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6142 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6143 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6144 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6145 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6147 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6148 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6153 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6154 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6155 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6156 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6157 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6158 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6159 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6160 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6161 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6162 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6163 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6164 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6165 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6166 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6167 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6167/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6168 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6170 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6171 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6172 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6173 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6174 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6175 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6176 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6177 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6178 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6179 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6406 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13659 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13660 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13661 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13662 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13663 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13664 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13665 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13666 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13666/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13667 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13668 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13668/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13669 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13669/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13670 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13671 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13671/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13673 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13673/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13674 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13675 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13676 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13677 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13678 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13679 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13680 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13681 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13682 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13682/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13683 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13685 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13686 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13686/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13687 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13688 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13695 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13696 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13696/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13697 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13697/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13699 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13699/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13700 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13701 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13702 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13702/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13703 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13704 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13705 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13706 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13706/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13707 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13708 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13709 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13710 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13710/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13711 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13711/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13713 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13714 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13715 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13716 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13717 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13718 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13719 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13719/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13720 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13720/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13721 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13723 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13724 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13725 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13726 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13727 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13728 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13729 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13730 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13732 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13734 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13734/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13735 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13735/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13736 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13736/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13737 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13737/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13738 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13739 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13740 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13741 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13742 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13742/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13743 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13744 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13746 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13747 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13748 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13749 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13750 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13750/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13751 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13752 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13753 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13754 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13755 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13756 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13757 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13758 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13759 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13761 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13763 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13764 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13767 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15903 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18197 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19880 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19923 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19926 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20503 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5754 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5755 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5756 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5757 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5758 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5759 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5760 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5761 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5763 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5764 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5765 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5767 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5768 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5768/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5770 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5772 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5773 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5774 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5776 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5777 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5778 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5779 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5780 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5781 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5782 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5784 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5784/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5787 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5788 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5789 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5790 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5791 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5792 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5793 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5794 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5795 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5796 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5799 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5801 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5802 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5803 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5804 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5805 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5806 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5807 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5808 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5809 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5810 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5811 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5812 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5813 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5814 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5822 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5823 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5824 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5827 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5828 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5829 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5830 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5831 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5832 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5833 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5834 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5835 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5836 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5837 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5837/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5838 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5839 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5840 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5844 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5844/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5847 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5848 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5850 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5851 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5852 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5853 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5854 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5855 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5856 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5857 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5858 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5859 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5860 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5861 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5862 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5863 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5864 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5865 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5865/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5867 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5867/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5868 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5869 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5870 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5871 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5871/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5872 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5872/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5874 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5875 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5875/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5876 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5877 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5878 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5879 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5880 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5881 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-8075 page",
"url": "https://www.suse.com/security/cve/CVE-2019-8075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-0561 page",
"url": "https://www.suse.com/security/cve/CVE-2020-0561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15959 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15960 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15961 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15962 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15963 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15964 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15965 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15966 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15967 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15968 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15969 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15970 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15971 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15972 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15973 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15974 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15975 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15976 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15978 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15979 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15980 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15981 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15982 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15983 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15984 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15985 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15986 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15987 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15988 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15989 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15990 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15990/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15991 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15992 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15992/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15995 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15999 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16000 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16001 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16002 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16003 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16004 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16005 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16006 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16007 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16008 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16008/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16009 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16011 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16012 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16013 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16014 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16015 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16016 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16017 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16018 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16019 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16020 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16021 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16022 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16023 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16024 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16025 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16026 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16027 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16028 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16028/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16029 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16030 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16031 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16031/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16032 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16033 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16034 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16034/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16035 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16036 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16036/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16037 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16038 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16039 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16040 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16041 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16042 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16043 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16044 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-27844 page",
"url": "https://www.suse.com/security/cve/CVE-2020-27844/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6377 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6377/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6378 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6378/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6379 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6379/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6380 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6380/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6381 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6381/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6382 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6385 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6387 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6388 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6389 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6390 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6391 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6392 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6393 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6394 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6394/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6395 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6395/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6396 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6396/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6397 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6398 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6399 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6400 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6400/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6401 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6402 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6403 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6404 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6405 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6406 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6407 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6408 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6409 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6409/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6410 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6411 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6411/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6412 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6413 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6413/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6414 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6414/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6415 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6415/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6416 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6416/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6417 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6418 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6420 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6420/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6422 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6423 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6423/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6424 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6425 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6425/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6426 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6427 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6428 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6428/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6429 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6430 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6431 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6431/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6432 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6432/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6433 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6433/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6434 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6434/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6435 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6436 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6437 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6438 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6438/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6439 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6440 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6441 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6442 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6442/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6443 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6443/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6444 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6444/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6445 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6445/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6446 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6447 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6448 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6448/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6449 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6450 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6450/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6451 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6451/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6452 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6452/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6454 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6454/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6455 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6455/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6456 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6457 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6458 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6458/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6459 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6460 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6462 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6463 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6464 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6465 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6466 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6467 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6468 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6469 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6470 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6470/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6471 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6472 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6473 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6474 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6474/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6475 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6475/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6476 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6477 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6478 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6478/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6479 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6480 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6481 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6482 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6482/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6483 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6483/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6484 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6484/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6485 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6485/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6486 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6486/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6487 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6487/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6488 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6488/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6489 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6490 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6490/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6491 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6491/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6493 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6493/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6494 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6494/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6495 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6495/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6496 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6505 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6505/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6506 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6507 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6507/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6509 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6510 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6511 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6512 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6513 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6513/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6514 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6515 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6516 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6517 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6518 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6519 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6519/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6520 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6520/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6521 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6522 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6522/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6523 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6524 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6524/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6525 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6526 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6526/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6527 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6528 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6528/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6529 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6530 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6531 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6532 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6533 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6534 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6535 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6536 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6537 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6538 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6539 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6540 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6541 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6542 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6542/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6543 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6544 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6545 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6546 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6547 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6548 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6549 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6550 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6551 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6552 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6553 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6553/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6554 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6555 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6556 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6557 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6558 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6559 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6559/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6560 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6561 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6562 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6563 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6564 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6564/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6565 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6565/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6566 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6567 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6568 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6569 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6570 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6571 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6573 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6574 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6575 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6576 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6831 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21106 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21107 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21108 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21109 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21110 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21111 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21112 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21113 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21114 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21115 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21116 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21117 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21118 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21119 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21119/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21120 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21121 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21122 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21123 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21124 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21125 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21126 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21127 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21128 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21129 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21130 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21131 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21132 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21133 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21134 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21135 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21136 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21137 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21138 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21139 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21140 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21141 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21142 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21143 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21144 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21145 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21146 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21147 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21148 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21149 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21150 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21151 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21152 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21153 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21154 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21155 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21156 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21157 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21159 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21160 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21161 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21162 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21163 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21164 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21165 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21166 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21167 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21167/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21168 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21169 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21170 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21171 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21172 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21173 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21174 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21175 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21176 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21177 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21178 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21179 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21180 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21181 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21182 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21183 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21184 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21185 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21186 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21187 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21188 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21189 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21190 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21191 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21192 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21192/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21193 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21194 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21195 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21196 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21197 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21198 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21199 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21201 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21202 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21203 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21204 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21205 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21205/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21206 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21206/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21207 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21208 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21209 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21210 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21211 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21212 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21213 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21214 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21215 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21216 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21217 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21218 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21219 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21220 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21221 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21222 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21223 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21224 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21225 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21226 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21227 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21228 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21229 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21230 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21231 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21232 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21233 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30506 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30507 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30507/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30508 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30509 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30510 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30511 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30512 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30513 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30513/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30514 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30515 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30519 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30519/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30520 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30520/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30521 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30522 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30522/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30523 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30524 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30524/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30525 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30526 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30526/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30527 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30528 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30528/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30529 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30530 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30531 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30532 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30533 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30534 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30535 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30536 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30538 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30539 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30540 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30544 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30545 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30546 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30547 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30548 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30549 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30550 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30551 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30552 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30553 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30553/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30554 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30555 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30556 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30557 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30559 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30559/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30561 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30562 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30563 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30564 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30564/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30565 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30565/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30566 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30567 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30568 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30569 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30571 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30572 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30573 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30574 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30575 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30576 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30577 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30578 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30579 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30579/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30581 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30582 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30584 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30585 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30585/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30588 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30589 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30590 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30591 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30591/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30592 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30592/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30593 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30594 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30596 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30597 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30598 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30599 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30600 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30601 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30602 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30603 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30604 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30606 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30607 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30608 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30609 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30610 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30611 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30612 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30612/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30613 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30614 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30615 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30616 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30617 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30618 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30619 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30620 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30621 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30622 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30623 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30624 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30624/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30625 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30626 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30626/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30627 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30627/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30628 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30628/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30629 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30630 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30631 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30632 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30633 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30633/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37956 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37957 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37958 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37959 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37960 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37961 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37962 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37963 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37964 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37965 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37966 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37967 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37968 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37969 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37970 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37971 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37972 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37973 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37974 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37975 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37976 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37977 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37978 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37979 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37980 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37981 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37982 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37983 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37984 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37985 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37986 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37987 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37988 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37989 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37990 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37990/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37991 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37992 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37992/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37993 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37993/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37994 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37994/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37995 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37996 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37997 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37997/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37998 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-37999 page",
"url": "https://www.suse.com/security/cve/CVE-2021-37999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38000 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38001 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38002 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38003 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38005 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38006 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38007 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38008 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38008/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38009 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38010 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38011 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38012 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38013 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38014 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38015 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38016 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38017 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38018 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38019 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38020 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38021 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38022 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4052 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4053 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4054 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4055 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4056 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4057 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4058 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4059 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4061 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4062 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4063 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4064 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4065 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4066 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4067 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4068 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4078 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4079 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4098 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4099 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4100 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4101 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4102 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0096 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0097 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0098 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0099 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0100 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0101 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0102 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0103 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0104 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0105 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0106 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0107 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0108 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0109 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0110 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0111 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0112 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0113 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0114 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0115 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0116 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0117 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0118 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0120 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0289 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0290 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0290/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0291 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0292 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0292/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0293 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0293/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0294 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0294/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0295 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0296 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0297 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0298 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0300 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0301 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0301/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0302 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0303 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0304 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0305 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0305/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0306 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0306/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0307 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0308 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0309 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0310 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0310/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0311 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0452 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0452/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0453 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0454 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0454/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0455 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0455/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0456 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0457 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0459 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0460 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0461 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0461/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0462 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0463 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0464 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0465 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0466 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0467 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0468 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0469 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0470 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0470/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0603 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0604 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0605 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0606 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0607 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0608 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0609 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0610 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0789 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0790 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0791 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0792 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0793 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0794 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0795 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0796 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0797 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0798 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0799 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0800 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0801 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0802 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0803 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0804 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0805 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0806 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0807 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0808 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0809 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0971 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0972 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0973 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0974 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0975 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0976 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0977 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0978 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0979 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0980 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1096 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1125 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1127 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1128 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1129 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1130 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1131 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1132 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1133 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1134 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1135 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1136 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1137 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1138 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1139 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1141 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1142 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1143 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1144 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1145 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1146 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1232 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1305 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1305/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1306 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1306/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1307 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1308 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1309 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1310 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1310/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1311 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1312 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1313 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1314 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1364 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1364/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1477 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1478 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1478/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1479 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1480 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1481 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1482 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1482/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1483 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1483/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1484 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1484/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1485 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1485/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1486 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1486/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1487 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1487/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1488 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1488/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1489 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1490 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1490/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1491 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1491/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1492 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1492/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1493 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1493/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1494 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1494/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1495 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1495/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1496 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1497 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1498 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1499 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1499/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1500 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1501 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1633 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1633/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1634 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1635 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1636 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1637 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1638 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1639 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1640 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1641 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1853 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1854 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1855 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1856 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1857 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1858 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1859 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1860 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1861 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1862 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1863 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1864 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1865 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1865/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1866 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1866/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1867 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1867/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1868 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1869 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1870 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1871 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1871/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1872 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1872/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1873 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1874 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1875 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1875/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1876 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2008 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2008/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2010 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2011 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2156 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2157 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2158 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2160 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2161 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2162 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2163 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2164 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2165 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2294 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2294/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2295 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2296 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2477 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2478 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2478/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2479 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2480 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2481 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2603 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2604 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2605 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2606 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2607 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2608 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2609 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2610 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2611 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2612 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2612/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2613 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2614 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2615 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2616 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2617 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2618 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2619 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2620 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2621 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2622 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2623 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2624 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2624/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2852 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2853 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2854 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2855 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2856 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2857 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2858 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2859 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2860 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2861 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3038 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3039 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3040 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3041 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3042 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3043 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3044 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3045 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3046 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3047 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3048 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3049 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3049/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3050 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3051 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3052 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3053 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3054 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3055 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3056 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3057 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3058 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3071 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3075 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3195 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3196 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3197 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3198 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3199 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3200 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3201 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3304 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3305 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3305/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3306 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3306/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3307 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3308 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3309 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3310 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3310/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3311 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3312 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3313 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3314 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3315 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3316 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3316/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3317 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3318 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3318/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3370 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3370/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3373 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3373/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3445 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3445/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3446 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3447 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3448 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3448/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3449 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3450 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3450/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3652 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3653 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3654 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3655 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3656 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3657 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3658 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3659 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3660 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3661 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3723 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3885 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3886 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3886/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3887 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3888 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3889 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3890 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4135 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4174 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4175 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4176 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4177 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4178 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4179 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4180 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4181 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4182 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4183 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4184 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4185 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4186 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4187 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4188 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4189 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4190 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4191 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4192 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4192/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4193 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4194 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4195 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4262 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4436 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4437 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4438 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4438/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4439 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-4440 page",
"url": "https://www.suse.com/security/cve/CVE-2022-4440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0128 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0129 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0130 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0131 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0132 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0135 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0136 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0137 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0138 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0139 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0140 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0141 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0471 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0472 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0473 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0474 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0474/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0696 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0696/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0697 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0697/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0698 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0699 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0699/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0700 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0701 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0702 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0702/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0703 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0704 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0705 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0927 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0928 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0929 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0930 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0931 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0932 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0933 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-0941 page",
"url": "https://www.suse.com/security/cve/CVE-2023-0941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1213 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1214 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1215 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1216 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1217 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1218 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1219 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1220 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1221 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1222 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1223 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1224 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1225 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1226 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1227 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1228 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1229 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1230 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1231 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1232 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1233 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1234 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1235 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1236 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1528 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1528/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1529 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1530 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1531 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1532 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1533 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1534 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1810 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1811 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1812 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1813 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1814 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1815 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1816 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1817 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1818 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1819 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1820 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1821 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1822 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1823 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2033 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2135 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2136 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2137 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2460 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2461 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2461/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2462 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2463 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2464 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2465 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2466 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2467 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2468 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2468/"
}
],
"title": "ungoogled-chromium-113.0.5672.92-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:12948-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"product": {
"name": "ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"product_id": "ungoogled-chromium-113.0.5672.92-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"product": {
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"product_id": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"product": {
"name": "ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"product_id": "ungoogled-chromium-113.0.5672.92-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"product": {
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"product_id": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ungoogled-chromium-113.0.5672.92-1.1.s390x",
"product": {
"name": "ungoogled-chromium-113.0.5672.92-1.1.s390x",
"product_id": "ungoogled-chromium-113.0.5672.92-1.1.s390x"
}
},
{
"category": "product_version",
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"product": {
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"product_id": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"product": {
"name": "ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"product_id": "ungoogled-chromium-113.0.5672.92-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64",
"product": {
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64",
"product_id": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ungoogled-chromium-113.0.5672.92-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64"
},
"product_reference": "ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ungoogled-chromium-113.0.5672.92-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le"
},
"product_reference": "ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ungoogled-chromium-113.0.5672.92-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x"
},
"product_reference": "ungoogled-chromium-113.0.5672.92-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ungoogled-chromium-113.0.5672.92-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64"
},
"product_reference": "ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64"
},
"product_reference": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le"
},
"product_reference": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x"
},
"product_reference": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
},
"product_reference": "ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2011-3015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3015"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3015",
"url": "https://www.suse.com/security/cve/CVE-2011-3015"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3015",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3015"
},
{
"cve": "CVE-2011-3016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3016"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes, related to a \"read-after-free\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3016",
"url": "https://www.suse.com/security/cve/CVE-2011-3016"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3016",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3016"
},
{
"cve": "CVE-2011-3017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3017"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to database handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3017",
"url": "https://www.suse.com/security/cve/CVE-2011-3017"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3017",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3017"
},
{
"cve": "CVE-2011-3018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3018"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to path rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3018",
"url": "https://www.suse.com/security/cve/CVE-2011-3018"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3018",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3018"
},
{
"cve": "CVE-2011-3019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3019"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska video (aka MKV) file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3019",
"url": "https://www.suse.com/security/cve/CVE-2011-3019"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3019",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3019"
},
{
"cve": "CVE-2011-3020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3020"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3020",
"url": "https://www.suse.com/security/cve/CVE-2011-3020"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3020",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3020"
},
{
"cve": "CVE-2011-3021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3021"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to subframe loading.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3021",
"url": "https://www.suse.com/security/cve/CVE-2011-3021"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3021",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3021"
},
{
"cve": "CVE-2011-3022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3022"
}
],
"notes": [
{
"category": "general",
"text": "translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3022",
"url": "https://www.suse.com/security/cve/CVE-2011-3022"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3022",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3022"
},
{
"cve": "CVE-2011-3023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3023"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to drag-and-drop operations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3023",
"url": "https://www.suse.com/security/cve/CVE-2011-3023"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3023",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3023"
},
{
"cve": "CVE-2011-3024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3024"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service (application crash) via an empty X.509 certificate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3024",
"url": "https://www.suse.com/security/cve/CVE-2011-3024"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3024",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3024"
},
{
"cve": "CVE-2011-3025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3025"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.56 does not properly parse H.264 data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3025",
"url": "https://www.suse.com/security/cve/CVE-2011-3025"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3025",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3025"
},
{
"cve": "CVE-2011-3026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3026"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3026",
"url": "https://www.suse.com/security/cve/CVE-2011-3026"
},
{
"category": "external",
"summary": "SUSE Bug 747311 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/747311"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/747327"
},
{
"category": "external",
"summary": "SUSE Bug 747328 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/747328"
},
{
"category": "external",
"summary": "SUSE Bug 773612 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/773612"
},
{
"category": "external",
"summary": "SUSE Bug 854395 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/854395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3026"
},
{
"cve": "CVE-2011-3027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3027"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3027",
"url": "https://www.suse.com/security/cve/CVE-2011-3027"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3027",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3027"
},
{
"cve": "CVE-2011-3031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3031"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the element wrapper in Google V8, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3031",
"url": "https://www.suse.com/security/cve/CVE-2011-3031"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3031",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3031"
},
{
"cve": "CVE-2011-3032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3032"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG values.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3032",
"url": "https://www.suse.com/security/cve/CVE-2011-3032"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3032",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3032"
},
{
"cve": "CVE-2011-3033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3033"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in Skia, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3033",
"url": "https://www.suse.com/security/cve/CVE-2011-3033"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3033",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3033"
},
{
"cve": "CVE-2011-3034",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3034"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3034",
"url": "https://www.suse.com/security/cve/CVE-2011-3034"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3034",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3034"
},
{
"cve": "CVE-2011-3035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3035"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3035",
"url": "https://www.suse.com/security/cve/CVE-2011-3035"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3035",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3035"
},
{
"cve": "CVE-2011-3036",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3036"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3036",
"url": "https://www.suse.com/security/cve/CVE-2011-3036"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3036",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3036"
},
{
"cve": "CVE-2011-3037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3037"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3037",
"url": "https://www.suse.com/security/cve/CVE-2011-3037"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3037",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3037"
},
{
"cve": "CVE-2011-3038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3038"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to multi-column handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3038",
"url": "https://www.suse.com/security/cve/CVE-2011-3038"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3038",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3038"
},
{
"cve": "CVE-2011-3039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3039"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to quote handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3039",
"url": "https://www.suse.com/security/cve/CVE-2011-3039"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3039",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3039"
},
{
"cve": "CVE-2011-3040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3040"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3040",
"url": "https://www.suse.com/security/cve/CVE-2011-3040"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3040",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3040"
},
{
"cve": "CVE-2011-3041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3041"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3041",
"url": "https://www.suse.com/security/cve/CVE-2011-3041"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3041",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3041"
},
{
"cve": "CVE-2011-3042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3042"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of table sections.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3042",
"url": "https://www.suse.com/security/cve/CVE-2011-3042"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3042",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3042"
},
{
"cve": "CVE-2011-3043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3043"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox (aka flexible box) in conjunction with the floating of elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3043",
"url": "https://www.suse.com/security/cve/CVE-2011-3043"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3043",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3043"
},
{
"cve": "CVE-2011-3044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3044"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animation elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3044",
"url": "https://www.suse.com/security/cve/CVE-2011-3044"
},
{
"category": "external",
"summary": "SUSE Bug 750407 for CVE-2011-3044",
"url": "https://bugzilla.suse.com/750407"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3044"
},
{
"cve": "CVE-2011-3045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3045"
}
],
"notes": [
{
"category": "general",
"text": "Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3045",
"url": "https://www.suse.com/security/cve/CVE-2011-3045"
},
{
"category": "external",
"summary": "SUSE Bug 752008 for CVE-2011-3045",
"url": "https://bugzilla.suse.com/752008"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3045",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3045"
},
{
"cve": "CVE-2011-3046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3046"
}
],
"notes": [
{
"category": "general",
"text": "The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a \"Universal XSS (UXSS)\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3046",
"url": "https://www.suse.com/security/cve/CVE-2011-3046"
},
{
"category": "external",
"summary": "SUSE Bug 751466 for CVE-2011-3046",
"url": "https://bugzilla.suse.com/751466"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3046"
},
{
"cve": "CVE-2011-3047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3047"
}
],
"notes": [
{
"category": "general",
"text": "The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an error in the plug-in loading mechanism.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3047",
"url": "https://www.suse.com/security/cve/CVE-2011-3047"
},
{
"category": "external",
"summary": "SUSE Bug 751738 for CVE-2011-3047",
"url": "https://bugzilla.suse.com/751738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3047"
},
{
"cve": "CVE-2011-3049",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3049"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.83 does not properly restrict the extension web request API, which allows remote attackers to cause a denial of service (disrupted system requests) via a crafted extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3049",
"url": "https://www.suse.com/security/cve/CVE-2011-3049"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3049",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3049"
},
{
"cve": "CVE-2011-3050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3050"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3050",
"url": "https://www.suse.com/security/cve/CVE-2011-3050"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3050",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3050"
},
{
"cve": "CVE-2011-3051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3051"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the cross-fade function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3051",
"url": "https://www.suse.com/security/cve/CVE-2011-3051"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3051",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3051"
},
{
"cve": "CVE-2011-3052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3052"
}
],
"notes": [
{
"category": "general",
"text": "The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3052",
"url": "https://www.suse.com/security/cve/CVE-2011-3052"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3052",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3052"
},
{
"cve": "CVE-2011-3053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3053"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3053",
"url": "https://www.suse.com/security/cve/CVE-2011-3053"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3053",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3053"
},
{
"cve": "CVE-2011-3054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3054"
}
],
"notes": [
{
"category": "general",
"text": "The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3054",
"url": "https://www.suse.com/security/cve/CVE-2011-3054"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3054",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3054"
},
{
"cve": "CVE-2011-3055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3055"
}
],
"notes": [
{
"category": "general",
"text": "The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3055",
"url": "https://www.suse.com/security/cve/CVE-2011-3055"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3055",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3055"
},
{
"cve": "CVE-2011-3056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3056"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a \"magic iframe.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3056",
"url": "https://www.suse.com/security/cve/CVE-2011-3056"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3056",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3056"
},
{
"cve": "CVE-2011-3057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3057"
}
],
"notes": [
{
"category": "general",
"text": "Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors that trigger an invalid read operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3057",
"url": "https://www.suse.com/security/cve/CVE-2011-3057"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3057",
"url": "https://bugzilla.suse.com/754456"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3057",
"url": "https://bugzilla.suse.com/754458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3057"
},
{
"cve": "CVE-2011-3058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3058"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3058",
"url": "https://www.suse.com/security/cve/CVE-2011-3058"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3058",
"url": "https://bugzilla.suse.com/754458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3058"
},
{
"cve": "CVE-2011-3059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3059"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3059",
"url": "https://www.suse.com/security/cve/CVE-2011-3059"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3059",
"url": "https://bugzilla.suse.com/754458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3059"
},
{
"cve": "CVE-2011-3060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3060"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3060",
"url": "https://www.suse.com/security/cve/CVE-2011-3060"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3060",
"url": "https://bugzilla.suse.com/754458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3060"
},
{
"cve": "CVE-2011-3061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3061"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3061",
"url": "https://www.suse.com/security/cve/CVE-2011-3061"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3061",
"url": "https://bugzilla.suse.com/754458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3061"
},
{
"cve": "CVE-2011-3062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3062"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3062",
"url": "https://www.suse.com/security/cve/CVE-2011-3062"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3062",
"url": "https://bugzilla.suse.com/754458"
},
{
"category": "external",
"summary": "SUSE Bug 758408 for CVE-2011-3062",
"url": "https://bugzilla.suse.com/758408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3062"
},
{
"cve": "CVE-2011-3063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3063"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 18.0.1025.142 does not properly validate the renderer\u0027s navigation requests, which has unspecified impact and remote attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3063",
"url": "https://www.suse.com/security/cve/CVE-2011-3063"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3063",
"url": "https://bugzilla.suse.com/754458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3063"
},
{
"cve": "CVE-2011-3064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3064"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3064",
"url": "https://www.suse.com/security/cve/CVE-2011-3064"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3064",
"url": "https://bugzilla.suse.com/754458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3064"
},
{
"cve": "CVE-2011-3065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3065"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3065",
"url": "https://www.suse.com/security/cve/CVE-2011-3065"
},
{
"category": "external",
"summary": "SUSE Bug 754458 for CVE-2011-3065",
"url": "https://bugzilla.suse.com/754458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3065"
},
{
"cve": "CVE-2011-3066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3066"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3066",
"url": "https://www.suse.com/security/cve/CVE-2011-3066"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3066"
},
{
"cve": "CVE-2011-3067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3067"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3067",
"url": "https://www.suse.com/security/cve/CVE-2011-3067"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3067"
},
{
"cve": "CVE-2011-3068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3068"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3068",
"url": "https://www.suse.com/security/cve/CVE-2011-3068"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3068"
},
{
"cve": "CVE-2011-3069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3069"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3069",
"url": "https://www.suse.com/security/cve/CVE-2011-3069"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3069"
},
{
"cve": "CVE-2011-3070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3070"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3070",
"url": "https://www.suse.com/security/cve/CVE-2011-3070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3070"
},
{
"cve": "CVE-2011-3071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3071"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3071",
"url": "https://www.suse.com/security/cve/CVE-2011-3071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3071"
},
{
"cve": "CVE-2011-3072",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3072"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3072",
"url": "https://www.suse.com/security/cve/CVE-2011-3072"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3072"
},
{
"cve": "CVE-2011-3073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3073"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3073",
"url": "https://www.suse.com/security/cve/CVE-2011-3073"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3073"
},
{
"cve": "CVE-2011-3074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3074"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3074",
"url": "https://www.suse.com/security/cve/CVE-2011-3074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3074"
},
{
"cve": "CVE-2011-3075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3075"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3075",
"url": "https://www.suse.com/security/cve/CVE-2011-3075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3075"
},
{
"cve": "CVE-2011-3076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3076"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3076",
"url": "https://www.suse.com/security/cve/CVE-2011-3076"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3076"
},
{
"cve": "CVE-2011-3077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3077"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a \"read-after-free\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3077",
"url": "https://www.suse.com/security/cve/CVE-2011-3077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3077"
},
{
"cve": "CVE-2011-3078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3078"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3078",
"url": "https://www.suse.com/security/cve/CVE-2011-3078"
},
{
"category": "external",
"summary": "SUSE Bug 760264 for CVE-2011-3078",
"url": "https://bugzilla.suse.com/760264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3078"
},
{
"cve": "CVE-2011-3079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3079"
}
],
"notes": [
{
"category": "general",
"text": "The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3079",
"url": "https://www.suse.com/security/cve/CVE-2011-3079"
},
{
"category": "external",
"summary": "SUSE Bug 1122983 for CVE-2011-3079",
"url": "https://bugzilla.suse.com/1122983"
},
{
"category": "external",
"summary": "SUSE Bug 760264 for CVE-2011-3079",
"url": "https://bugzilla.suse.com/760264"
},
{
"category": "external",
"summary": "SUSE Bug 930622 for CVE-2011-3079",
"url": "https://bugzilla.suse.com/930622"
},
{
"category": "external",
"summary": "SUSE Bug 986639 for CVE-2011-3079",
"url": "https://bugzilla.suse.com/986639"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3079"
},
{
"cve": "CVE-2011-3080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3080"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass intended sandbox restrictions via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3080",
"url": "https://www.suse.com/security/cve/CVE-2011-3080"
},
{
"category": "external",
"summary": "SUSE Bug 760264 for CVE-2011-3080",
"url": "https://bugzilla.suse.com/760264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3080"
},
{
"cve": "CVE-2011-3081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3081"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3081",
"url": "https://www.suse.com/security/cve/CVE-2011-3081"
},
{
"category": "external",
"summary": "SUSE Bug 760264 for CVE-2011-3081",
"url": "https://bugzilla.suse.com/760264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3081"
},
{
"cve": "CVE-2011-3083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3083"
}
],
"notes": [
{
"category": "general",
"text": "browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3083",
"url": "https://www.suse.com/security/cve/CVE-2011-3083"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3083",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3083"
},
{
"cve": "CVE-2011-3084",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3084"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3084",
"url": "https://www.suse.com/security/cve/CVE-2011-3084"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3084",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3084"
},
{
"cve": "CVE-2011-3085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3085"
}
],
"notes": [
{
"category": "general",
"text": "The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vectors involving long values.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3085",
"url": "https://www.suse.com/security/cve/CVE-2011-3085"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3085",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3085"
},
{
"cve": "CVE-2011-3086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3086"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3086",
"url": "https://www.suse.com/security/cve/CVE-2011-3086"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3086",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3086"
},
{
"cve": "CVE-2011-3087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3087"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3087",
"url": "https://www.suse.com/security/cve/CVE-2011-3087"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3087",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3087"
},
{
"cve": "CVE-2011-3088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3088"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3088",
"url": "https://www.suse.com/security/cve/CVE-2011-3088"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3088",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3088"
},
{
"cve": "CVE-2011-3089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3089"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving tables.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3089",
"url": "https://www.suse.com/security/cve/CVE-2011-3089"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3089",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3089"
},
{
"cve": "CVE-2011-3090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3090"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3090",
"url": "https://www.suse.com/security/cve/CVE-2011-3090"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3090",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3090"
},
{
"cve": "CVE-2011-3091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3091"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3091",
"url": "https://www.suse.com/security/cve/CVE-2011-3091"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3091",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3091"
},
{
"cve": "CVE-2011-3092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3092"
}
],
"notes": [
{
"category": "general",
"text": "The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (invalid write operation) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3092",
"url": "https://www.suse.com/security/cve/CVE-2011-3092"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3092",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3092"
},
{
"cve": "CVE-2011-3093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3093"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3093",
"url": "https://www.suse.com/security/cve/CVE-2011-3093"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3093",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3093"
},
{
"cve": "CVE-2011-3094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3094"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3094",
"url": "https://www.suse.com/security/cve/CVE-2011-3094"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3094",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3094"
},
{
"cve": "CVE-2011-3095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3095"
}
],
"notes": [
{
"category": "general",
"text": "The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3095",
"url": "https://www.suse.com/security/cve/CVE-2011-3095"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3095",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3095"
},
{
"cve": "CVE-2011-3096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3096"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an error in the GTK implementation of the omnibox.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3096",
"url": "https://www.suse.com/security/cve/CVE-2011-3096"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3096",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3096"
},
{
"cve": "CVE-2011-3098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3098"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which might allow local users to gain privileges via a Trojan horse plug-in in an unspecified directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3098",
"url": "https://www.suse.com/security/cve/CVE-2011-3098"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3098",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3098"
},
{
"cve": "CVE-2011-3100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3100"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 19.0.1084.46 does not properly draw dash paths, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3100",
"url": "https://www.suse.com/security/cve/CVE-2011-3100"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3100",
"url": "https://bugzilla.suse.com/762481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3100"
},
{
"cve": "CVE-2011-3101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3101"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors. NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3101",
"url": "https://www.suse.com/security/cve/CVE-2011-3101"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3101",
"url": "https://bugzilla.suse.com/762481"
},
{
"category": "external",
"summary": "SUSE Bug 765204 for CVE-2011-3101",
"url": "https://bugzilla.suse.com/765204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3101"
},
{
"cve": "CVE-2011-3102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3102"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3102",
"url": "https://www.suse.com/security/cve/CVE-2011-3102"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2011-3102",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 762481 for CVE-2011-3102",
"url": "https://bugzilla.suse.com/762481"
},
{
"category": "external",
"summary": "SUSE Bug 764538 for CVE-2011-3102",
"url": "https://bugzilla.suse.com/764538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3102"
},
{
"cve": "CVE-2011-3903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3903"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3903",
"url": "https://www.suse.com/security/cve/CVE-2011-3903"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3903",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3903"
},
{
"cve": "CVE-2011-3904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3904"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3904",
"url": "https://www.suse.com/security/cve/CVE-2011-3904"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3904",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3904"
},
{
"cve": "CVE-2011-3905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3905"
}
],
"notes": [
{
"category": "general",
"text": "libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3905",
"url": "https://www.suse.com/security/cve/CVE-2011-3905"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3905",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3905"
},
{
"cve": "CVE-2011-3906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3906"
}
],
"notes": [
{
"category": "general",
"text": "The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3906",
"url": "https://www.suse.com/security/cve/CVE-2011-3906"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3906",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3906"
},
{
"cve": "CVE-2011-3907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3907"
}
],
"notes": [
{
"category": "general",
"text": "The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3907",
"url": "https://www.suse.com/security/cve/CVE-2011-3907"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3907",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3907"
},
{
"cve": "CVE-2011-3908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3908"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3908",
"url": "https://www.suse.com/security/cve/CVE-2011-3908"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3908",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3908"
},
{
"cve": "CVE-2011-3909",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3909"
}
],
"notes": [
{
"category": "general",
"text": "The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3909",
"url": "https://www.suse.com/security/cve/CVE-2011-3909"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3909",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3909"
},
{
"cve": "CVE-2011-3910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3910"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3910",
"url": "https://www.suse.com/security/cve/CVE-2011-3910"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3910",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3910"
},
{
"cve": "CVE-2011-3911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3911"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3911",
"url": "https://www.suse.com/security/cve/CVE-2011-3911"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3911",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3911"
},
{
"cve": "CVE-2011-3912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3912"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3912",
"url": "https://www.suse.com/security/cve/CVE-2011-3912"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3912",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3912"
},
{
"cve": "CVE-2011-3914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3914"
}
],
"notes": [
{
"category": "general",
"text": "The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3914",
"url": "https://www.suse.com/security/cve/CVE-2011-3914"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3914",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3914"
},
{
"cve": "CVE-2011-3915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3915"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3915",
"url": "https://www.suse.com/security/cve/CVE-2011-3915"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3915",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3915"
},
{
"cve": "CVE-2011-3916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3916"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3916",
"url": "https://www.suse.com/security/cve/CVE-2011-3916"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3916",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3916"
},
{
"cve": "CVE-2011-3917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3917"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in FileWatcher in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3917",
"url": "https://www.suse.com/security/cve/CVE-2011-3917"
},
{
"category": "external",
"summary": "SUSE Bug 736716 for CVE-2011-3917",
"url": "https://bugzilla.suse.com/736716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3917"
},
{
"cve": "CVE-2011-3919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3919"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3919",
"url": "https://www.suse.com/security/cve/CVE-2011-3919"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2011-3919",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 739894 for CVE-2011-3919",
"url": "https://bugzilla.suse.com/739894"
},
{
"category": "external",
"summary": "SUSE Bug 740493 for CVE-2011-3919",
"url": "https://bugzilla.suse.com/740493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3919"
},
{
"cve": "CVE-2011-3921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3921"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving animation frames.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3921",
"url": "https://www.suse.com/security/cve/CVE-2011-3921"
},
{
"category": "external",
"summary": "SUSE Bug 740493 for CVE-2011-3921",
"url": "https://bugzilla.suse.com/740493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3921"
},
{
"cve": "CVE-2011-3922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3922"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3922",
"url": "https://www.suse.com/security/cve/CVE-2011-3922"
},
{
"category": "external",
"summary": "SUSE Bug 739904 for CVE-2011-3922",
"url": "https://bugzilla.suse.com/739904"
},
{
"category": "external",
"summary": "SUSE Bug 740493 for CVE-2011-3922",
"url": "https://bugzilla.suse.com/740493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3922"
},
{
"cve": "CVE-2011-3924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3924"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM selections.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3924",
"url": "https://www.suse.com/security/cve/CVE-2011-3924"
},
{
"category": "external",
"summary": "SUSE Bug 743319 for CVE-2011-3924",
"url": "https://bugzilla.suse.com/743319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3924"
},
{
"cve": "CVE-2011-3925",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3925"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3925",
"url": "https://www.suse.com/security/cve/CVE-2011-3925"
},
{
"category": "external",
"summary": "SUSE Bug 743319 for CVE-2011-3925",
"url": "https://bugzilla.suse.com/743319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3925"
},
{
"cve": "CVE-2011-3926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3926"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3926",
"url": "https://www.suse.com/security/cve/CVE-2011-3926"
},
{
"category": "external",
"summary": "SUSE Bug 743319 for CVE-2011-3926",
"url": "https://bugzilla.suse.com/743319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3926"
},
{
"cve": "CVE-2011-3927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3927"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization of values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3927",
"url": "https://www.suse.com/security/cve/CVE-2011-3927"
},
{
"category": "external",
"summary": "SUSE Bug 743319 for CVE-2011-3927",
"url": "https://bugzilla.suse.com/743319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3927"
},
{
"cve": "CVE-2011-3928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3928"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3928",
"url": "https://www.suse.com/security/cve/CVE-2011-3928"
},
{
"category": "external",
"summary": "SUSE Bug 743319 for CVE-2011-3928",
"url": "https://bugzilla.suse.com/743319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3928"
},
{
"cve": "CVE-2011-3953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3953"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, which has unspecified impact and remote attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3953",
"url": "https://www.suse.com/security/cve/CVE-2011-3953"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3953",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3953"
},
{
"cve": "CVE-2011-3954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3954"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3954",
"url": "https://www.suse.com/security/cve/CVE-2011-3954"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3954",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3954"
},
{
"cve": "CVE-2011-3955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3955"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3955",
"url": "https://www.suse.com/security/cve/CVE-2011-3955"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3955",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3955"
},
{
"cve": "CVE-2011-3956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3956"
}
],
"notes": [
{
"category": "general",
"text": "The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3956",
"url": "https://www.suse.com/security/cve/CVE-2011-3956"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3956",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3956"
},
{
"cve": "CVE-2011-3957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3957"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF documents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3957",
"url": "https://www.suse.com/security/cve/CVE-2011-3957"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3957",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3957"
},
{
"cve": "CVE-2011-3958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3958"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3958",
"url": "https://www.suse.com/security/cve/CVE-2011-3958"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3958",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3958"
},
{
"cve": "CVE-2011-3959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3959"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3959",
"url": "https://www.suse.com/security/cve/CVE-2011-3959"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3959",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3959"
},
{
"cve": "CVE-2011-3960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3960"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3960",
"url": "https://www.suse.com/security/cve/CVE-2011-3960"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3960",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3960"
},
{
"cve": "CVE-2011-3961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3961"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code via vectors that trigger a crash of a utility process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3961",
"url": "https://www.suse.com/security/cve/CVE-2011-3961"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3961",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2011-3961"
},
{
"cve": "CVE-2011-3962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3962"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3962",
"url": "https://www.suse.com/security/cve/CVE-2011-3962"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3962",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3962"
},
{
"cve": "CVE-2011-3963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3963"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3963",
"url": "https://www.suse.com/security/cve/CVE-2011-3963"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3963",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3963"
},
{
"cve": "CVE-2011-3964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3964"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3964",
"url": "https://www.suse.com/security/cve/CVE-2011-3964"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3964",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3964"
},
{
"cve": "CVE-2011-3965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3965"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3965",
"url": "https://www.suse.com/security/cve/CVE-2011-3965"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3965",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3965"
},
{
"cve": "CVE-2011-3966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3966"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to error handling for Cascading Style Sheets (CSS) token-sequence data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3966",
"url": "https://www.suse.com/security/cve/CVE-2011-3966"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3966",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3966"
},
{
"cve": "CVE-2011-3967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3967"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via a crafted certificate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3967",
"url": "https://www.suse.com/security/cve/CVE-2011-3967"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3967",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3967"
},
{
"cve": "CVE-2011-3968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3968"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3968",
"url": "https://www.suse.com/security/cve/CVE-2011-3968"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3968",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3968"
},
{
"cve": "CVE-2011-3969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3969"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout of SVG documents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3969",
"url": "https://www.suse.com/security/cve/CVE-2011-3969"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3969",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3969"
},
{
"cve": "CVE-2011-3970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3970"
}
],
"notes": [
{
"category": "general",
"text": "libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3970",
"url": "https://www.suse.com/security/cve/CVE-2011-3970"
},
{
"category": "external",
"summary": "SUSE Bug 746039 for CVE-2011-3970",
"url": "https://bugzilla.suse.com/746039"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3970",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3970"
},
{
"cve": "CVE-2011-3971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3971"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3971",
"url": "https://www.suse.com/security/cve/CVE-2011-3971"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3971",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3971"
},
{
"cve": "CVE-2011-3972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3972"
}
],
"notes": [
{
"category": "general",
"text": "The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3972",
"url": "https://www.suse.com/security/cve/CVE-2011-3972"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3972",
"url": "https://bugzilla.suse.com/747327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3972"
},
{
"cve": "CVE-2012-1521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-1521"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-1521",
"url": "https://www.suse.com/security/cve/CVE-2012-1521"
},
{
"category": "external",
"summary": "SUSE Bug 760264 for CVE-2012-1521",
"url": "https://bugzilla.suse.com/760264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-1521"
},
{
"cve": "CVE-2012-2807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2807"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2807",
"url": "https://www.suse.com/security/cve/CVE-2012-2807"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2012-2807",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2807",
"url": "https://bugzilla.suse.com/769181"
},
{
"category": "external",
"summary": "SUSE Bug 769184 for CVE-2012-2807",
"url": "https://bugzilla.suse.com/769184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2807"
},
{
"cve": "CVE-2012-2815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2815"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive information from a fragment identifier by leveraging access to an IFRAME element associated with a different domain.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2815",
"url": "https://www.suse.com/security/cve/CVE-2012-2815"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2815",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2815"
},
{
"cve": "CVE-2012-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2816"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a denial of service (process interference) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2816",
"url": "https://www.suse.com/security/cve/CVE-2012-2816"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2816",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2816"
},
{
"cve": "CVE-2012-2817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2817"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2817",
"url": "https://www.suse.com/security/cve/CVE-2012-2817"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2817",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2817"
},
{
"cve": "CVE-2012-2818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2818"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets (CSS) counters feature.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2818",
"url": "https://www.suse.com/security/cve/CVE-2012-2818"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2818",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2818"
},
{
"cve": "CVE-2012-2819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2819"
}
],
"notes": [
{
"category": "general",
"text": "The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2819",
"url": "https://www.suse.com/security/cve/CVE-2012-2819"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2819",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2819"
},
{
"cve": "CVE-2012-2820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2820"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2820",
"url": "https://www.suse.com/security/cve/CVE-2012-2820"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2820",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2820"
},
{
"cve": "CVE-2012-2821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2821"
}
],
"notes": [
{
"category": "general",
"text": "The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2821",
"url": "https://www.suse.com/security/cve/CVE-2012-2821"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2821",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2821"
},
{
"cve": "CVE-2012-2823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2823"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG resources.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2823",
"url": "https://www.suse.com/security/cve/CVE-2012-2823"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2823",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2823"
},
{
"cve": "CVE-2012-2825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2825"
}
],
"notes": [
{
"category": "general",
"text": "The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2825",
"url": "https://www.suse.com/security/cve/CVE-2012-2825"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2825",
"url": "https://bugzilla.suse.com/769181"
},
{
"category": "external",
"summary": "SUSE Bug 769182 for CVE-2012-2825",
"url": "https://bugzilla.suse.com/769182"
},
{
"category": "external",
"summary": "SUSE Bug 849019 for CVE-2012-2825",
"url": "https://bugzilla.suse.com/849019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2825"
},
{
"cve": "CVE-2012-2826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2826"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 20.0.1132.43 does not properly implement texture conversion, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2826",
"url": "https://www.suse.com/security/cve/CVE-2012-2826"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2826",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2826"
},
{
"cve": "CVE-2012-2829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2829"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2829",
"url": "https://www.suse.com/security/cve/CVE-2012-2829"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2829",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2829"
},
{
"cve": "CVE-2012-2830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2830"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 20.0.1132.43 does not properly set array values, which allows remote attackers to cause a denial of service (incorrect pointer use) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2830",
"url": "https://www.suse.com/security/cve/CVE-2012-2830"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2830",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2830"
},
{
"cve": "CVE-2012-2831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2831"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG references.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2831",
"url": "https://www.suse.com/security/cve/CVE-2012-2831"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2831",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2831"
},
{
"cve": "CVE-2012-2834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2834"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted data in the Matroska container format.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2834",
"url": "https://www.suse.com/security/cve/CVE-2012-2834"
},
{
"category": "external",
"summary": "SUSE Bug 769181 for CVE-2012-2834",
"url": "https://bugzilla.suse.com/769181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-2834"
},
{
"cve": "CVE-2012-2842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2842"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counter handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2842",
"url": "https://www.suse.com/security/cve/CVE-2012-2842"
},
{
"category": "external",
"summary": "SUSE Bug 770821 for CVE-2012-2842",
"url": "https://bugzilla.suse.com/770821"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2842"
},
{
"cve": "CVE-2012-2843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2843"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout height tracking.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2843",
"url": "https://www.suse.com/security/cve/CVE-2012-2843"
},
{
"category": "external",
"summary": "SUSE Bug 770821 for CVE-2012-2843",
"url": "https://bugzilla.suse.com/770821"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2843"
},
{
"cve": "CVE-2012-2865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2865"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2865",
"url": "https://www.suse.com/security/cve/CVE-2012-2865"
},
{
"category": "external",
"summary": "SUSE Bug 778005 for CVE-2012-2865",
"url": "https://bugzilla.suse.com/778005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2865"
},
{
"cve": "CVE-2012-2866",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2866"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in elements, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2866",
"url": "https://www.suse.com/security/cve/CVE-2012-2866"
},
{
"category": "external",
"summary": "SUSE Bug 778005 for CVE-2012-2866",
"url": "https://bugzilla.suse.com/778005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2866"
},
{
"cve": "CVE-2012-2867",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2867"
}
],
"notes": [
{
"category": "general",
"text": "The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2867",
"url": "https://www.suse.com/security/cve/CVE-2012-2867"
},
{
"category": "external",
"summary": "SUSE Bug 778005 for CVE-2012-2867",
"url": "https://bugzilla.suse.com/778005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2867"
},
{
"cve": "CVE-2012-2868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2868"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2868",
"url": "https://www.suse.com/security/cve/CVE-2012-2868"
},
{
"category": "external",
"summary": "SUSE Bug 778005 for CVE-2012-2868",
"url": "https://bugzilla.suse.com/778005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2868"
},
{
"cve": "CVE-2012-2869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2869"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a \"stale buffer.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2869",
"url": "https://www.suse.com/security/cve/CVE-2012-2869"
},
{
"category": "external",
"summary": "SUSE Bug 778005 for CVE-2012-2869",
"url": "https://bugzilla.suse.com/778005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2869"
},
{
"cve": "CVE-2012-2870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2870"
}
],
"notes": [
{
"category": "general",
"text": "libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2870",
"url": "https://www.suse.com/security/cve/CVE-2012-2870"
},
{
"category": "external",
"summary": "SUSE Bug 778005 for CVE-2012-2870",
"url": "https://bugzilla.suse.com/778005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2870"
},
{
"cve": "CVE-2012-2871",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2871"
}
],
"notes": [
{
"category": "general",
"text": "libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2871",
"url": "https://www.suse.com/security/cve/CVE-2012-2871"
},
{
"category": "external",
"summary": "SUSE Bug 1078828 for CVE-2012-2871",
"url": "https://bugzilla.suse.com/1078828"
},
{
"category": "external",
"summary": "SUSE Bug 778005 for CVE-2012-2871",
"url": "https://bugzilla.suse.com/778005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2871"
},
{
"cve": "CVE-2012-2872",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2872"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2872",
"url": "https://www.suse.com/security/cve/CVE-2012-2872"
},
{
"category": "external",
"summary": "SUSE Bug 778005 for CVE-2012-2872",
"url": "https://bugzilla.suse.com/778005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2872"
},
{
"cve": "CVE-2012-2874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2874"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation, a different vulnerability than CVE-2012-2883.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2874",
"url": "https://www.suse.com/security/cve/CVE-2012-2874"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2874",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2874"
},
{
"cve": "CVE-2012-2876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2876"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2876",
"url": "https://www.suse.com/security/cve/CVE-2012-2876"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2876",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2876"
},
{
"cve": "CVE-2012-2877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2877"
}
],
"notes": [
{
"category": "general",
"text": "The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2877",
"url": "https://www.suse.com/security/cve/CVE-2012-2877"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2877",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2877"
},
{
"cve": "CVE-2012-2878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2878"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2878",
"url": "https://www.suse.com/security/cve/CVE-2012-2878"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2878",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2878"
},
{
"cve": "CVE-2012-2879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2879"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM topology corruption) via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2879",
"url": "https://www.suse.com/security/cve/CVE-2012-2879"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2879",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2879"
},
{
"cve": "CVE-2012-2880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2880"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2880",
"url": "https://www.suse.com/security/cve/CVE-2012-2880"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2880",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2880"
},
{
"cve": "CVE-2012-2881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2881"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2881",
"url": "https://www.suse.com/security/cve/CVE-2012-2881"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2881",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2881"
},
{
"cve": "CVE-2012-2882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2882"
}
],
"notes": [
{
"category": "general",
"text": "FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a \"wild pointer\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2882",
"url": "https://www.suse.com/security/cve/CVE-2012-2882"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2882",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2882"
},
{
"cve": "CVE-2012-2883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2883"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation, a different vulnerability than CVE-2012-2874.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2883",
"url": "https://www.suse.com/security/cve/CVE-2012-2883"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2883",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2883"
},
{
"cve": "CVE-2012-2884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2884"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2884",
"url": "https://www.suse.com/security/cve/CVE-2012-2884"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2884",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2884"
},
{
"cve": "CVE-2012-2885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2885"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to application exit.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2885",
"url": "https://www.suse.com/security/cve/CVE-2012-2885"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2885",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2885"
},
{
"cve": "CVE-2012-2886",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2886"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2886",
"url": "https://www.suse.com/security/cve/CVE-2012-2886"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2886",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2886"
},
{
"cve": "CVE-2012-2887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2887"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving onclick events.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2887",
"url": "https://www.suse.com/security/cve/CVE-2012-2887"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2887",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2887"
},
{
"cve": "CVE-2012-2888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2888"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG text references.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2888",
"url": "https://www.suse.com/security/cve/CVE-2012-2888"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2888",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2888"
},
{
"cve": "CVE-2012-2889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2889"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2889",
"url": "https://www.suse.com/security/cve/CVE-2012-2889"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2889",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2889"
},
{
"cve": "CVE-2012-2891",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2891"
}
],
"notes": [
{
"category": "general",
"text": "The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive information about memory addresses via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2891",
"url": "https://www.suse.com/security/cve/CVE-2012-2891"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2891",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2891"
},
{
"cve": "CVE-2012-2892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2892"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2892",
"url": "https://www.suse.com/security/cve/CVE-2012-2892"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2892",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2892"
},
{
"cve": "CVE-2012-2893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2893"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2893",
"url": "https://www.suse.com/security/cve/CVE-2012-2893"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2893",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2893"
},
{
"cve": "CVE-2012-2894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2894"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2894",
"url": "https://www.suse.com/security/cve/CVE-2012-2894"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2894",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-2894"
},
{
"cve": "CVE-2012-2896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2896"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2896",
"url": "https://www.suse.com/security/cve/CVE-2012-2896"
},
{
"category": "external",
"summary": "SUSE Bug 782257 for CVE-2012-2896",
"url": "https://bugzilla.suse.com/782257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-2896"
},
{
"cve": "CVE-2012-5130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5130"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5130",
"url": "https://www.suse.com/security/cve/CVE-2012-5130"
},
{
"category": "external",
"summary": "SUSE Bug 791234 for CVE-2012-5130",
"url": "https://bugzilla.suse.com/791234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5130"
},
{
"cve": "CVE-2012-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5131"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU driver, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5131",
"url": "https://www.suse.com/security/cve/CVE-2012-5131"
},
{
"category": "external",
"summary": "SUSE Bug 791234 for CVE-2012-5131",
"url": "https://bugzilla.suse.com/791234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5131"
},
{
"cve": "CVE-2012-5132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5132"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a response with chunked transfer coding.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5132",
"url": "https://www.suse.com/security/cve/CVE-2012-5132"
},
{
"category": "external",
"summary": "SUSE Bug 791234 for CVE-2012-5132",
"url": "https://bugzilla.suse.com/791234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5132"
},
{
"cve": "CVE-2012-5133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5133"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5133",
"url": "https://www.suse.com/security/cve/CVE-2012-5133"
},
{
"category": "external",
"summary": "SUSE Bug 791234 for CVE-2012-5133",
"url": "https://bugzilla.suse.com/791234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5133"
},
{
"cve": "CVE-2012-5134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5134"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5134",
"url": "https://www.suse.com/security/cve/CVE-2012-5134"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2012-5134",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 791234 for CVE-2012-5134",
"url": "https://bugzilla.suse.com/791234"
},
{
"category": "external",
"summary": "SUSE Bug 793334 for CVE-2012-5134",
"url": "https://bugzilla.suse.com/793334"
},
{
"category": "external",
"summary": "SUSE Bug 795039 for CVE-2012-5134",
"url": "https://bugzilla.suse.com/795039"
},
{
"category": "external",
"summary": "SUSE Bug 804033 for CVE-2012-5134",
"url": "https://bugzilla.suse.com/804033"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5134"
},
{
"cve": "CVE-2012-5135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5135"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5135",
"url": "https://www.suse.com/security/cve/CVE-2012-5135"
},
{
"category": "external",
"summary": "SUSE Bug 791234 for CVE-2012-5135",
"url": "https://bugzilla.suse.com/791234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5135"
},
{
"cve": "CVE-2012-5136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5136"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5136",
"url": "https://www.suse.com/security/cve/CVE-2012-5136"
},
{
"category": "external",
"summary": "SUSE Bug 791234 for CVE-2012-5136",
"url": "https://bugzilla.suse.com/791234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5136"
},
{
"cve": "CVE-2012-5137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5137"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 23.0.1271.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Media Source API.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5137",
"url": "https://www.suse.com/security/cve/CVE-2012-5137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-5137"
},
{
"cve": "CVE-2012-5138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5138"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5138",
"url": "https://www.suse.com/security/cve/CVE-2012-5138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-5138"
},
{
"cve": "CVE-2012-5139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5139"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5139",
"url": "https://www.suse.com/security/cve/CVE-2012-5139"
},
{
"category": "external",
"summary": "SUSE Bug 794075 for CVE-2012-5139",
"url": "https://bugzilla.suse.com/794075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-5139"
},
{
"cve": "CVE-2012-5140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5140"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5140",
"url": "https://www.suse.com/security/cve/CVE-2012-5140"
},
{
"category": "external",
"summary": "SUSE Bug 794075 for CVE-2012-5140",
"url": "https://bugzilla.suse.com/794075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-5140"
},
{
"cve": "CVE-2012-5141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5141"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5141",
"url": "https://www.suse.com/security/cve/CVE-2012-5141"
},
{
"category": "external",
"summary": "SUSE Bug 794075 for CVE-2012-5141",
"url": "https://bugzilla.suse.com/794075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-5141"
},
{
"cve": "CVE-2012-5142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5142"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5142",
"url": "https://www.suse.com/security/cve/CVE-2012-5142"
},
{
"category": "external",
"summary": "SUSE Bug 794075 for CVE-2012-5142",
"url": "https://bugzilla.suse.com/794075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-5142"
},
{
"cve": "CVE-2012-5143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5143"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PPAPI image buffers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5143",
"url": "https://www.suse.com/security/cve/CVE-2012-5143"
},
{
"category": "external",
"summary": "SUSE Bug 794075 for CVE-2012-5143",
"url": "https://bugzilla.suse.com/794075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-5143"
},
{
"cve": "CVE-2012-5144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5144"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to \"an off-by-one overwrite when switching to LTP profile from MAIN.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5144",
"url": "https://www.suse.com/security/cve/CVE-2012-5144"
},
{
"category": "external",
"summary": "SUSE Bug 794075 for CVE-2012-5144",
"url": "https://bugzilla.suse.com/794075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-5144"
},
{
"cve": "CVE-2012-5145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5145"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5145",
"url": "https://www.suse.com/security/cve/CVE-2012-5145"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5145",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5145"
},
{
"cve": "CVE-2012-5146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5146"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5146",
"url": "https://www.suse.com/security/cve/CVE-2012-5146"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5146",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5146"
},
{
"cve": "CVE-2012-5147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5147"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5147",
"url": "https://www.suse.com/security/cve/CVE-2012-5147"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5147",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5147"
},
{
"cve": "CVE-2012-5148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5148"
}
],
"notes": [
{
"category": "general",
"text": "The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5148",
"url": "https://www.suse.com/security/cve/CVE-2012-5148"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5148",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5148"
},
{
"cve": "CVE-2012-5149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5149"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5149",
"url": "https://www.suse.com/security/cve/CVE-2012-5149"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5149",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5149"
},
{
"cve": "CVE-2012-5150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5150"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving seek operations on video data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5150",
"url": "https://www.suse.com/security/cve/CVE-2012-5150"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5150",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5150"
},
{
"cve": "CVE-2012-5152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5152"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving seek operations on video data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5152",
"url": "https://www.suse.com/security/cve/CVE-2012-5152"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5152",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5152"
},
{
"cve": "CVE-2012-5153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5153"
}
],
"notes": [
{
"category": "general",
"text": "Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5153",
"url": "https://www.suse.com/security/cve/CVE-2012-5153"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5153",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5153"
},
{
"cve": "CVE-2012-5154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5154"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to allocation of shared memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5154",
"url": "https://www.suse.com/security/cve/CVE-2012-5154"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2012-5154",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-5154"
},
{
"cve": "CVE-2013-0830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0830"
}
],
"notes": [
{
"category": "general",
"text": "The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0830",
"url": "https://www.suse.com/security/cve/CVE-2013-0830"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0830",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0830"
},
{
"cve": "CVE-2013-0831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0831"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to have an unspecified impact by leveraging access to an extension process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0831",
"url": "https://www.suse.com/security/cve/CVE-2013-0831"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0831",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0831"
},
{
"cve": "CVE-2013-0832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0832"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0832",
"url": "https://www.suse.com/security/cve/CVE-2013-0832"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0832",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0832"
},
{
"cve": "CVE-2013-0833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0833"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to printing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0833",
"url": "https://www.suse.com/security/cve/CVE-2013-0833"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0833",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0833"
},
{
"cve": "CVE-2013-0834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0834"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving glyphs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0834",
"url": "https://www.suse.com/security/cve/CVE-2013-0834"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0834",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0834"
},
{
"cve": "CVE-2013-0835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0835"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in the Geolocation implementation in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (application crash) via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0835",
"url": "https://www.suse.com/security/cve/CVE-2013-0835"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0835",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0835"
},
{
"cve": "CVE-2013-0836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0836"
}
],
"notes": [
{
"category": "general",
"text": "Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0836",
"url": "https://www.suse.com/security/cve/CVE-2013-0836"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0836",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0836"
},
{
"cve": "CVE-2013-0837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0837"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0837",
"url": "https://www.suse.com/security/cve/CVE-2013-0837"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0837",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0837"
},
{
"cve": "CVE-2013-0838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0838"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 24.0.1312.52 on Linux uses weak permissions for shared memory segments, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0838",
"url": "https://www.suse.com/security/cve/CVE-2013-0838"
},
{
"category": "external",
"summary": "SUSE Bug 798326 for CVE-2013-0838",
"url": "https://bugzilla.suse.com/798326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0838"
},
{
"cve": "CVE-2013-0879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0879"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly implement web audio nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0879",
"url": "https://www.suse.com/security/cve/CVE-2013-0879"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0879",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0879"
},
{
"cve": "CVE-2013-0880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0880"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to databases.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0880",
"url": "https://www.suse.com/security/cve/CVE-2013-0880"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0880",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0880"
},
{
"cve": "CVE-2013-0881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0881"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect read operation) via crafted data in the Matroska container format.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0881",
"url": "https://www.suse.com/security/cve/CVE-2013-0881"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0881",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0881"
},
{
"cve": "CVE-2013-0882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0882"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via a large number of SVG parameters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0882",
"url": "https://www.suse.com/security/cve/CVE-2013-0882"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0882",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0882"
},
{
"cve": "CVE-2013-0883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0883"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0883",
"url": "https://www.suse.com/security/cve/CVE-2013-0883"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0883",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0883"
},
{
"cve": "CVE-2013-0884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0884"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly load Native Client (aka NaCl) code, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0884",
"url": "https://www.suse.com/security/cve/CVE-2013-0884"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0884",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0884"
},
{
"cve": "CVE-2013-0885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0885"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0885",
"url": "https://www.suse.com/security/cve/CVE-2013-0885"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0885",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0885"
},
{
"cve": "CVE-2013-0886",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0886"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.99 on Mac OS X does not properly implement signal handling for Native Client (aka NaCl) code, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0886",
"url": "https://www.suse.com/security/cve/CVE-2013-0886"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0886",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0886"
},
{
"cve": "CVE-2013-0887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0887"
}
],
"notes": [
{
"category": "general",
"text": "The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0887",
"url": "https://www.suse.com/security/cve/CVE-2013-0887"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0887",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0887"
},
{
"cve": "CVE-2013-0888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0888"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a \"user gesture check for dangerous file downloads.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0888",
"url": "https://www.suse.com/security/cve/CVE-2013-0888"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0888",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0888"
},
{
"cve": "CVE-2013-0889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0889"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0889",
"url": "https://www.suse.com/security/cve/CVE-2013-0889"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0889",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0889"
},
{
"cve": "CVE-2013-0890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0890"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0890",
"url": "https://www.suse.com/security/cve/CVE-2013-0890"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0890",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0890"
},
{
"cve": "CVE-2013-0891",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0891"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a blob.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0891",
"url": "https://www.suse.com/security/cve/CVE-2013-0891"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0891",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0891"
},
{
"cve": "CVE-2013-0892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0892"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0892",
"url": "https://www.suse.com/security/cve/CVE-2013-0892"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0892",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0892"
},
{
"cve": "CVE-2013-0893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0893"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0893",
"url": "https://www.suse.com/security/cve/CVE-2013-0893"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0893",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0893"
},
{
"cve": "CVE-2013-0894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0894"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0894",
"url": "https://www.suse.com/security/cve/CVE-2013-0894"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0894",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0894"
},
{
"cve": "CVE-2013-0895",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0895"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0895",
"url": "https://www.suse.com/security/cve/CVE-2013-0895"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0895",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0895"
},
{
"cve": "CVE-2013-0896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0896"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling for plug-ins, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0896",
"url": "https://www.suse.com/security/cve/CVE-2013-0896"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0896",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0896"
},
{
"cve": "CVE-2013-0897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0897"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0897",
"url": "https://www.suse.com/security/cve/CVE-2013-0897"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0897",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0897"
},
{
"cve": "CVE-2013-0898",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0898"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0898",
"url": "https://www.suse.com/security/cve/CVE-2013-0898"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0898",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-0898"
},
{
"cve": "CVE-2013-0899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0899"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0899",
"url": "https://www.suse.com/security/cve/CVE-2013-0899"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0899",
"url": "https://bugzilla.suse.com/804986"
},
{
"category": "external",
"summary": "SUSE Bug 830356 for CVE-2013-0899",
"url": "https://bugzilla.suse.com/830356"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0899"
},
{
"cve": "CVE-2013-0900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0900"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0900",
"url": "https://www.suse.com/security/cve/CVE-2013-0900"
},
{
"category": "external",
"summary": "SUSE Bug 804986 for CVE-2013-0900",
"url": "https://bugzilla.suse.com/804986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0900"
},
{
"cve": "CVE-2013-2838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2838"
}
],
"notes": [
{
"category": "general",
"text": "Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2838",
"url": "https://www.suse.com/security/cve/CVE-2013-2838"
},
{
"category": "external",
"summary": "SUSE Bug 821601 for CVE-2013-2838",
"url": "https://bugzilla.suse.com/821601"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2838"
},
{
"cve": "CVE-2013-2906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2906"
}
],
"notes": [
{
"category": "general",
"text": "Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp, core/platform/audio/AudioDSPKernelProcessor.cpp, core/platform/audio/HRTFElevation.cpp, and modules/webaudio/ConvolverNode.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2906",
"url": "https://www.suse.com/security/cve/CVE-2013-2906"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2906",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2906"
},
{
"cve": "CVE-2013-2907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2907"
}
],
"notes": [
{
"category": "general",
"text": "The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2907",
"url": "https://www.suse.com/security/cve/CVE-2013-2907"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2907",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2907"
},
{
"cve": "CVE-2013-2908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2908"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2908",
"url": "https://www.suse.com/security/cve/CVE-2013-2908"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2908",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2908"
},
{
"cve": "CVE-2013-2909",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2909"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2909",
"url": "https://www.suse.com/security/cve/CVE-2013-2909"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2909",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2909"
},
{
"cve": "CVE-2013-2910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2910"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2910",
"url": "https://www.suse.com/security/cve/CVE-2013-2910"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2910",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2910"
},
{
"cve": "CVE-2013-2911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2911"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of post-failure recompilation in unspecified libxslt versions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2911",
"url": "https://www.suse.com/security/cve/CVE-2013-2911"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2911",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2911"
},
{
"cve": "CVE-2013-2912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2912"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper_in_process_router.cc in the Pepper Plug-in API (PPAPI) in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a resource-destruction message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2912",
"url": "https://www.suse.com/security/cve/CVE-2013-2912"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2912",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2912"
},
{
"cve": "CVE-2013-2913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2913"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an XML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2913",
"url": "https://www.suse.com/security/cve/CVE-2013-2913"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2913",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2913"
},
{
"cve": "CVE-2013-2914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2914"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2914",
"url": "https://www.suse.com/security/cve/CVE-2013-2914"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2914",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2914"
},
{
"cve": "CVE-2013-2915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2915"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2915",
"url": "https://www.suse.com/security/cve/CVE-2013-2915"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2915",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2915"
},
{
"cve": "CVE-2013-2916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2916"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code, in conjunction with a delay in notifying the user of an attempted spoof.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2916",
"url": "https://www.suse.com/security/cve/CVE-2013-2916"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2916",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2916"
},
{
"cve": "CVE-2013-2917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2917"
}
],
"notes": [
{
"category": "general",
"text": "The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2917",
"url": "https://www.suse.com/security/cve/CVE-2013-2917"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2917",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2917"
},
{
"cve": "CVE-2013-2918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2918"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect handling of parent-child relationships for anonymous blocks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2918",
"url": "https://www.suse.com/security/cve/CVE-2013-2918"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2918",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2918"
},
{
"cve": "CVE-2013-2919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2919"
}
],
"notes": [
{
"category": "general",
"text": "Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2919",
"url": "https://www.suse.com/security/cve/CVE-2013-2919"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2919",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2919"
},
{
"cve": "CVE-2013-2920",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2920"
}
],
"notes": [
{
"category": "general",
"text": "The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via a relative URL containing a hostname, as demonstrated by a protocol-relative URL beginning with a //www.google.com/ substring.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2920",
"url": "https://www.suse.com/security/cve/CVE-2013-2920"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2920",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2920"
},
{
"cve": "CVE-2013-2921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2921"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering certain callback processing during the reporting of a resource entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2921",
"url": "https://www.suse.com/security/cve/CVE-2013-2921"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2921",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2921"
},
{
"cve": "CVE-2013-2922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2922"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2922",
"url": "https://www.suse.com/security/cve/CVE-2013-2922"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2922",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2922"
},
{
"cve": "CVE-2013-2923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2923"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2923",
"url": "https://www.suse.com/security/cve/CVE-2013-2923"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2923",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2923"
},
{
"cve": "CVE-2013-2924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2924"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2924",
"url": "https://www.suse.com/security/cve/CVE-2013-2924"
},
{
"category": "external",
"summary": "SUSE Bug 844084 for CVE-2013-2924",
"url": "https://bugzilla.suse.com/844084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2924"
},
{
"cve": "CVE-2013-2925",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2925"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger multiple conflicting uses of the same XMLHttpRequest object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2925",
"url": "https://www.suse.com/security/cve/CVE-2013-2925"
},
{
"category": "external",
"summary": "SUSE Bug 846444 for CVE-2013-2925",
"url": "https://bugzilla.suse.com/846444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2925"
},
{
"cve": "CVE-2013-2926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2926"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core/editing/IndentOutdentCommand.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to list elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2926",
"url": "https://www.suse.com/security/cve/CVE-2013-2926"
},
{
"category": "external",
"summary": "SUSE Bug 846444 for CVE-2013-2926",
"url": "https://bugzilla.suse.com/846444"
},
{
"category": "external",
"summary": "SUSE Bug 871792 for CVE-2013-2926",
"url": "https://bugzilla.suse.com/871792"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2926"
},
{
"cve": "CVE-2013-2927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2927"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to submission for FORM elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2927",
"url": "https://www.suse.com/security/cve/CVE-2013-2927"
},
{
"category": "external",
"summary": "SUSE Bug 846444 for CVE-2013-2927",
"url": "https://bugzilla.suse.com/846444"
},
{
"category": "external",
"summary": "SUSE Bug 879607 for CVE-2013-2927",
"url": "https://bugzilla.suse.com/879607"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2927"
},
{
"cve": "CVE-2013-2928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2928"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2928",
"url": "https://www.suse.com/security/cve/CVE-2013-2928"
},
{
"category": "external",
"summary": "SUSE Bug 846444 for CVE-2013-2928",
"url": "https://bugzilla.suse.com/846444"
},
{
"category": "external",
"summary": "SUSE Bug 871792 for CVE-2013-2928",
"url": "https://bugzilla.suse.com/871792"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2928"
},
{
"cve": "CVE-2013-2931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2931"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2931",
"url": "https://www.suse.com/security/cve/CVE-2013-2931"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-2931",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-2931"
},
{
"cve": "CVE-2013-6621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6621"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6621",
"url": "https://www.suse.com/security/cve/CVE-2013-6621"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6621",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6621"
},
{
"cve": "CVE-2013-6622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6622"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the movement of a media element between documents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6622",
"url": "https://www.suse.com/security/cve/CVE-2013-6622"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6622",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6622"
},
{
"cve": "CVE-2013-6623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6623"
}
],
"notes": [
{
"category": "general",
"text": "The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging the use of tree order, rather than transitive dependency order, for layout.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6623",
"url": "https://www.suse.com/security/cve/CVE-2013-6623"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6623",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6623"
},
{
"cve": "CVE-2013-6624",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6624"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the string values of id attributes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6624",
"url": "https://www.suse.com/security/cve/CVE-2013-6624"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6624",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6624"
},
{
"cve": "CVE-2013-6625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6625"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM range objects in circumstances that require child node removal after a (1) mutation or (2) blur event.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6625",
"url": "https://www.suse.com/security/cve/CVE-2013-6625"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6625",
"url": "https://bugzilla.suse.com/850430"
},
{
"category": "external",
"summary": "SUSE Bug 871792 for CVE-2013-6625",
"url": "https://bugzilla.suse.com/871792"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6625"
},
{
"cve": "CVE-2013-6626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6626"
}
],
"notes": [
{
"category": "general",
"text": "The WebContentsImpl::AttachInterstitialPage function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6626",
"url": "https://www.suse.com/security/cve/CVE-2013-6626"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6626",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6626"
},
{
"cve": "CVE-2013-6627",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6627"
}
],
"notes": [
{
"category": "general",
"text": "net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows remote web servers to cause a denial of service (out-of-bounds read) via a crafted response.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6627",
"url": "https://www.suse.com/security/cve/CVE-2013-6627"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6627",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6627"
},
{
"cve": "CVE-2013-6628",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6628"
}
],
"notes": [
{
"category": "general",
"text": "net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that a server\u0027s X.509 certificate is the same during renegotiation as it was before renegotiation, which might allow remote web servers to interfere with trust relationships by renegotiating a session.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6628",
"url": "https://www.suse.com/security/cve/CVE-2013-6628"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6628",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6628"
},
{
"cve": "CVE-2013-6629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6629"
}
],
"notes": [
{
"category": "general",
"text": "The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6629",
"url": "https://www.suse.com/security/cve/CVE-2013-6629"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6629",
"url": "https://bugzilla.suse.com/850430"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2013-6629",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2013-6629",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2013-6629",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2013-6629",
"url": "https://bugzilla.suse.com/877430"
},
{
"category": "external",
"summary": "SUSE Bug 880246 for CVE-2013-6629",
"url": "https://bugzilla.suse.com/880246"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6629"
},
{
"cve": "CVE-2013-6630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6630"
}
],
"notes": [
{
"category": "general",
"text": "The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6630",
"url": "https://www.suse.com/security/cve/CVE-2013-6630"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6630",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6630"
},
{
"cve": "CVE-2013-6631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6631"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6631",
"url": "https://www.suse.com/security/cve/CVE-2013-6631"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6631",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6631"
},
{
"cve": "CVE-2013-6632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6632"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6632",
"url": "https://www.suse.com/security/cve/CVE-2013-6632"
},
{
"category": "external",
"summary": "SUSE Bug 850430 for CVE-2013-6632",
"url": "https://bugzilla.suse.com/850430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2013-6632"
},
{
"cve": "CVE-2013-6634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6634"
}
],
"notes": [
{
"category": "general",
"text": "The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows remote attackers to conduct session fixation attacks and hijack web sessions by triggering improper sync after a 302 (aka Found) HTTP status code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6634",
"url": "https://www.suse.com/security/cve/CVE-2013-6634"
},
{
"category": "external",
"summary": "SUSE Bug 854472 for CVE-2013-6634",
"url": "https://bugzilla.suse.com/854472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6634"
},
{
"cve": "CVE-2013-6635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6635"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree, related to CompositeEditCommand.cpp and ReplaceSelectionCommand.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6635",
"url": "https://www.suse.com/security/cve/CVE-2013-6635"
},
{
"category": "external",
"summary": "SUSE Bug 854472 for CVE-2013-6635",
"url": "https://bugzilla.suse.com/854472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6635"
},
{
"cve": "CVE-2013-6636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6636"
}
],
"notes": [
{
"category": "general",
"text": "The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors involving the document.write method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6636",
"url": "https://www.suse.com/security/cve/CVE-2013-6636"
},
{
"category": "external",
"summary": "SUSE Bug 854472 for CVE-2013-6636",
"url": "https://bugzilla.suse.com/854472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6636"
},
{
"cve": "CVE-2013-6637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6637"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6637",
"url": "https://www.suse.com/security/cve/CVE-2013-6637"
},
{
"category": "external",
"summary": "SUSE Bug 854472 for CVE-2013-6637",
"url": "https://bugzilla.suse.com/854472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6637"
},
{
"cve": "CVE-2013-6638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6638"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) Runtime_TypedArrayInitialize and (2) Runtime_TypedArrayInitializeFromArrayLike functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6638",
"url": "https://www.suse.com/security/cve/CVE-2013-6638"
},
{
"category": "external",
"summary": "SUSE Bug 854473 for CVE-2013-6638",
"url": "https://bugzilla.suse.com/854473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6638"
},
{
"cve": "CVE-2013-6639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6639"
}
],
"notes": [
{
"category": "general",
"text": "The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6639",
"url": "https://www.suse.com/security/cve/CVE-2013-6639"
},
{
"category": "external",
"summary": "SUSE Bug 854473 for CVE-2013-6639",
"url": "https://bugzilla.suse.com/854473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6639"
},
{
"cve": "CVE-2013-6640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6640"
}
],
"notes": [
{
"category": "general",
"text": "The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6640",
"url": "https://www.suse.com/security/cve/CVE-2013-6640"
},
{
"category": "external",
"summary": "SUSE Bug 854473 for CVE-2013-6640",
"url": "https://bugzilla.suse.com/854473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6640"
},
{
"cve": "CVE-2013-6641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6641"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of the past names map of a FORM element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6641",
"url": "https://www.suse.com/security/cve/CVE-2013-6641"
},
{
"category": "external",
"summary": "SUSE Bug 861013 for CVE-2013-6641",
"url": "https://bugzilla.suse.com/861013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6641"
},
{
"cve": "CVE-2013-6643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6643"
}
],
"notes": [
{
"category": "general",
"text": "The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one_click_signin_bubble_view.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6643",
"url": "https://www.suse.com/security/cve/CVE-2013-6643"
},
{
"category": "external",
"summary": "SUSE Bug 861013 for CVE-2013-6643",
"url": "https://bugzilla.suse.com/861013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6643"
},
{
"cve": "CVE-2013-6644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6644"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6644",
"url": "https://www.suse.com/security/cve/CVE-2013-6644"
},
{
"category": "external",
"summary": "SUSE Bug 861013 for CVE-2013-6644",
"url": "https://bugzilla.suse.com/861013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6644"
},
{
"cve": "CVE-2013-6645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6645"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/web_contents/web_contents_view_aura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving certain print-preview and tab-switch actions that interact with a speech input element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6645",
"url": "https://www.suse.com/security/cve/CVE-2013-6645"
},
{
"category": "external",
"summary": "SUSE Bug 861013 for CVE-2013-6645",
"url": "https://bugzilla.suse.com/861013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6645"
},
{
"cve": "CVE-2013-6646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6646"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the shutting down of a worker process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6646",
"url": "https://www.suse.com/security/cve/CVE-2013-6646"
},
{
"category": "external",
"summary": "SUSE Bug 861013 for CVE-2013-6646",
"url": "https://bugzilla.suse.com/861013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6646"
},
{
"cve": "CVE-2013-6649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6649"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6649",
"url": "https://www.suse.com/security/cve/CVE-2013-6649"
},
{
"category": "external",
"summary": "SUSE Bug 861013 for CVE-2013-6649",
"url": "https://bugzilla.suse.com/861013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6649"
},
{
"cve": "CVE-2013-6650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6650"
}
],
"notes": [
{
"category": "general",
"text": "The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of \"popular pages.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6650",
"url": "https://www.suse.com/security/cve/CVE-2013-6650"
},
{
"category": "external",
"summary": "SUSE Bug 861013 for CVE-2013-6650",
"url": "https://bugzilla.suse.com/861013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6650"
},
{
"cve": "CVE-2013-6653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6653"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to the color chooser.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6653",
"url": "https://www.suse.com/security/cve/CVE-2013-6653"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6653",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6653"
},
{
"cve": "CVE-2013-6654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6654"
}
],
"notes": [
{
"category": "general",
"text": "The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of service (incorrect cast) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6654",
"url": "https://www.suse.com/security/cve/CVE-2013-6654"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6654",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6654"
},
{
"cve": "CVE-2013-6655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6655"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and layout.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6655",
"url": "https://www.suse.com/security/cve/CVE-2013-6655"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6655",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6655"
},
{
"cve": "CVE-2013-6656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6656"
}
],
"notes": [
{
"category": "general",
"text": "The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote attackers to obtain sensitive information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6656",
"url": "https://www.suse.com/security/cve/CVE-2013-6656"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6656",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6656"
},
{
"cve": "CVE-2013-6657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6657"
}
],
"notes": [
{
"category": "general",
"text": "core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6657",
"url": "https://www.suse.com/security/cve/CVE-2013-6657"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6657",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6657"
},
{
"cve": "CVE-2013-6658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6658"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving (1) running JavaScript code during execution of the updateWidgetPositions function or (2) making a call into a plugin during execution of the updateWidgetPositions function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6658",
"url": "https://www.suse.com/security/cve/CVE-2013-6658"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6658",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6658"
},
{
"cve": "CVE-2013-6659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6659"
}
],
"notes": [
{
"category": "general",
"text": "The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user\u0027s expectations, by initiating a TLS renegotiation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6659",
"url": "https://www.suse.com/security/cve/CVE-2013-6659"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6659",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6659"
},
{
"cve": "CVE-2013-6660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6660"
}
],
"notes": [
{
"category": "general",
"text": "The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6660",
"url": "https://www.suse.com/security/cve/CVE-2013-6660"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6660",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6660"
},
{
"cve": "CVE-2013-6661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6661"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6661",
"url": "https://www.suse.com/security/cve/CVE-2013-6661"
},
{
"category": "external",
"summary": "SUSE Bug 865500 for CVE-2013-6661",
"url": "https://bugzilla.suse.com/865500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-6661"
},
{
"cve": "CVE-2014-0574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0574"
}
],
"notes": [
{
"category": "general",
"text": "Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK \u0026 Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0574",
"url": "https://www.suse.com/security/cve/CVE-2014-0574"
},
{
"category": "external",
"summary": "SUSE Bug 905032 for CVE-2014-0574",
"url": "https://bugzilla.suse.com/905032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0574"
},
{
"cve": "CVE-2014-1700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1700"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of a certain utterance data structure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1700",
"url": "https://www.suse.com/security/cve/CVE-2014-1700"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1700",
"url": "https://bugzilla.suse.com/866959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1700"
},
{
"cve": "CVE-2014-1701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1701"
}
],
"notes": [
{
"category": "general",
"text": "The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1701",
"url": "https://www.suse.com/security/cve/CVE-2014-1701"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1701",
"url": "https://bugzilla.suse.com/866959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1701"
},
{
"cve": "CVE-2014-1702",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1702"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThread.cpp in the web database implementation in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of scheduled tasks during shutdown of a thread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1702",
"url": "https://www.suse.com/security/cve/CVE-2014-1702"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1702",
"url": "https://bugzilla.suse.com/866959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1702"
},
{
"cve": "CVE-2014-1703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1703"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1703",
"url": "https://www.suse.com/security/cve/CVE-2014-1703"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1703",
"url": "https://bugzilla.suse.com/866959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1703"
},
{
"cve": "CVE-2014-1704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1704"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1704",
"url": "https://www.suse.com/security/cve/CVE-2014-1704"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1704",
"url": "https://bugzilla.suse.com/866959"
},
{
"category": "external",
"summary": "SUSE Bug 868707 for CVE-2014-1704",
"url": "https://bugzilla.suse.com/868707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-1704"
},
{
"cve": "CVE-2014-1705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1705"
}
],
"notes": [
{
"category": "general",
"text": "Google V8, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1705",
"url": "https://www.suse.com/security/cve/CVE-2014-1705"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1705",
"url": "https://bugzilla.suse.com/866959"
},
{
"category": "external",
"summary": "SUSE Bug 868707 for CVE-2014-1705",
"url": "https://bugzilla.suse.com/868707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-1705"
},
{
"cve": "CVE-2014-1713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1713"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1713",
"url": "https://www.suse.com/security/cve/CVE-2014-1713"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1713",
"url": "https://bugzilla.suse.com/866959"
},
{
"category": "external",
"summary": "SUSE Bug 871792 for CVE-2014-1713",
"url": "https://bugzilla.suse.com/871792"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1713"
},
{
"cve": "CVE-2014-1714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1714"
}
],
"notes": [
{
"category": "general",
"text": "The ScopedClipboardWriter::WritePickledData function in ui/base/clipboard/scoped_clipboard_writer.cc in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows does not verify a certain format value, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the clipboard.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1714",
"url": "https://www.suse.com/security/cve/CVE-2014-1714"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1714",
"url": "https://bugzilla.suse.com/866959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1714"
},
{
"cve": "CVE-2014-1715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1715"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows has unspecified impact and attack vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1715",
"url": "https://www.suse.com/security/cve/CVE-2014-1715"
},
{
"category": "external",
"summary": "SUSE Bug 866959 for CVE-2014-1715",
"url": "https://bugzilla.suse.com/866959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1715"
},
{
"cve": "CVE-2014-1716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1716"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1716",
"url": "https://www.suse.com/security/cve/CVE-2014-1716"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1716",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1716"
},
{
"cve": "CVE-2014-1717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1717"
}
],
"notes": [
{
"category": "general",
"text": "Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1717",
"url": "https://www.suse.com/security/cve/CVE-2014-1717"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1717",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1717"
},
{
"cve": "CVE-2014-1718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1718"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_manager.cc in the software compositor in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted mapping of a large amount of renderer memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1718",
"url": "https://www.suse.com/security/cve/CVE-2014-1718"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1718",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1718"
},
{
"cve": "CVE-2014-1719",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1719"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworker_stub.cc in the Web Workers implementation in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger a SharedWorker termination during script loading.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1719",
"url": "https://www.suse.com/security/cve/CVE-2014-1719"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1719",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1719"
},
{
"cve": "CVE-2014-1720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1720"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attributes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1720",
"url": "https://www.suse.com/security/cve/CVE-2014-1720"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1720",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1720"
},
{
"cve": "CVE-2014-1721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1721"
}
],
"notes": [
{
"category": "general",
"text": "Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by improper handling of a heap allocation of a number outside the Small Integer (aka smi) range.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1721",
"url": "https://www.suse.com/security/cve/CVE-2014-1721"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1721",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1721"
},
{
"cve": "CVE-2014-1722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1722"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving addition of a child node.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1722",
"url": "https://www.suse.com/security/cve/CVE-2014-1722"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1722",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1722"
},
{
"cve": "CVE-2014-1723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1723"
}
],
"notes": [
{
"category": "general",
"text": "The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1723",
"url": "https://www.suse.com/security/cve/CVE-2014-1723"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1723",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1723"
},
{
"cve": "CVE-2014-1724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1724"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service (application hang) or possibly have unspecified other impact via a text-to-speech request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1724",
"url": "https://www.suse.com/security/cve/CVE-2014-1724"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1724",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1724"
},
{
"cve": "CVE-2014-1725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1725"
}
],
"notes": [
{
"category": "general",
"text": "The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via a window.atob method call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1725",
"url": "https://www.suse.com/security/cve/CVE-2014-1725"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1725",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1725"
},
{
"cve": "CVE-2014-1726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1726"
}
],
"notes": [
{
"category": "general",
"text": "The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1726",
"url": "https://www.suse.com/security/cve/CVE-2014-1726"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1726",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1726"
},
{
"cve": "CVE-2014-1727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1727"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to forms.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1727",
"url": "https://www.suse.com/security/cve/CVE-2014-1727"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1727",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1727"
},
{
"cve": "CVE-2014-1728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1728"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1728",
"url": "https://www.suse.com/security/cve/CVE-2014-1728"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1728",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1728"
},
{
"cve": "CVE-2014-1729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1729"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1729",
"url": "https://www.suse.com/security/cve/CVE-2014-1729"
},
{
"category": "external",
"summary": "SUSE Bug 872805 for CVE-2014-1729",
"url": "https://bugzilla.suse.com/872805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1729"
},
{
"cve": "CVE-2014-1730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1730"
}
],
"notes": [
{
"category": "general",
"text": "Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging \"type confusion\" and reading property values, related to i18n.js and runtime.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1730",
"url": "https://www.suse.com/security/cve/CVE-2014-1730"
},
{
"category": "external",
"summary": "SUSE Bug 875408 for CVE-2014-1730",
"url": "https://bugzilla.suse.com/875408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1730"
},
{
"cve": "CVE-2014-1731",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1731"
}
],
"notes": [
{
"category": "general",
"text": "core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion\" for SELECT elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1731",
"url": "https://www.suse.com/security/cve/CVE-2014-1731"
},
{
"category": "external",
"summary": "SUSE Bug 875408 for CVE-2014-1731",
"url": "https://bugzilla.suse.com/875408"
},
{
"category": "external",
"summary": "SUSE Bug 879607 for CVE-2014-1731",
"url": "https://bugzilla.suse.com/879607"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1731"
},
{
"cve": "CVE-2014-1732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1732"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in browser/ui/views/speech_recognition_bubble_views.cc in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via an INPUT element that triggers the presence of a Speech Recognition Bubble window for an incorrect duration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1732",
"url": "https://www.suse.com/security/cve/CVE-2014-1732"
},
{
"category": "external",
"summary": "SUSE Bug 875408 for CVE-2014-1732",
"url": "https://bugzilla.suse.com/875408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1732"
},
{
"cve": "CVE-2014-1733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1733"
}
],
"notes": [
{
"category": "general",
"text": "The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1733",
"url": "https://www.suse.com/security/cve/CVE-2014-1733"
},
{
"category": "external",
"summary": "SUSE Bug 875408 for CVE-2014-1733",
"url": "https://bugzilla.suse.com/875408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1733"
},
{
"cve": "CVE-2014-1734",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1734"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1734",
"url": "https://www.suse.com/security/cve/CVE-2014-1734"
},
{
"category": "external",
"summary": "SUSE Bug 875408 for CVE-2014-1734",
"url": "https://bugzilla.suse.com/875408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1734"
},
{
"cve": "CVE-2014-1735",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1735"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google V8 before 3.24.35.33, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1735",
"url": "https://www.suse.com/security/cve/CVE-2014-1735"
},
{
"category": "external",
"summary": "SUSE Bug 875408 for CVE-2014-1735",
"url": "https://bugzilla.suse.com/875408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1735"
},
{
"cve": "CVE-2014-1740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1740"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to WebSocketJob deletion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1740",
"url": "https://www.suse.com/security/cve/CVE-2014-1740"
},
{
"category": "external",
"summary": "SUSE Bug 877768 for CVE-2014-1740",
"url": "https://bugzilla.suse.com/877768"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1740"
},
{
"cve": "CVE-2014-1741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1741"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to ranges.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1741",
"url": "https://www.suse.com/security/cve/CVE-2014-1741"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1741"
},
{
"cve": "CVE-2014-1742",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1742"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1742",
"url": "https://www.suse.com/security/cve/CVE-2014-1742"
},
{
"category": "external",
"summary": "SUSE Bug 877768 for CVE-2014-1742",
"url": "https://bugzilla.suse.com/877768"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1742"
},
{
"cve": "CVE-2014-1743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1743"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1743",
"url": "https://www.suse.com/security/cve/CVE-2014-1743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1743"
},
{
"cve": "CVE-2014-1744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1744"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google Chrome before 35.0.1916.114 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large shared-memory allocation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1744",
"url": "https://www.suse.com/security/cve/CVE-2014-1744"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1744"
},
{
"cve": "CVE-2014-1745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1745"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1745",
"url": "https://www.suse.com/security/cve/CVE-2014-1745"
},
{
"category": "external",
"summary": "SUSE Bug 1219604 for CVE-2014-1745",
"url": "https://bugzilla.suse.com/1219604"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1745"
},
{
"cve": "CVE-2014-1746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1746"
}
],
"notes": [
{
"category": "general",
"text": "The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service (out-of-bounds read) via vectors that trigger use of a large buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1746",
"url": "https://www.suse.com/security/cve/CVE-2014-1746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1746"
},
{
"cve": "CVE-2014-1747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1747"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1747",
"url": "https://www.suse.com/security/cve/CVE-2014-1747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1747"
},
{
"cve": "CVE-2014-1748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1748"
}
],
"notes": [
{
"category": "general",
"text": "The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1748",
"url": "https://www.suse.com/security/cve/CVE-2014-1748"
},
{
"category": "external",
"summary": "SUSE Bug 909707 for CVE-2014-1748",
"url": "https://bugzilla.suse.com/909707"
},
{
"category": "external",
"summary": "SUSE Bug 971460 for CVE-2014-1748",
"url": "https://bugzilla.suse.com/971460"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1748"
},
{
"cve": "CVE-2014-1749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1749"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 35.0.1916.114 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1749",
"url": "https://www.suse.com/security/cve/CVE-2014-1749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1749"
},
{
"cve": "CVE-2014-3152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3152"
}
],
"notes": [
{
"category": "general",
"text": "Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3152",
"url": "https://www.suse.com/security/cve/CVE-2014-3152"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3152"
},
{
"cve": "CVE-2014-3154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3154"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3154",
"url": "https://www.suse.com/security/cve/CVE-2014-3154"
},
{
"category": "external",
"summary": "SUSE Bug 882267 for CVE-2014-3154",
"url": "https://bugzilla.suse.com/882267"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3154"
},
{
"cve": "CVE-2014-3155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3155"
}
],
"notes": [
{
"category": "general",
"text": "net/spdy/spdy_write_queue.cc in the SPDY implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging incorrect queue maintenance.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3155",
"url": "https://www.suse.com/security/cve/CVE-2014-3155"
},
{
"category": "external",
"summary": "SUSE Bug 882263 for CVE-2014-3155",
"url": "https://bugzilla.suse.com/882263"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3155"
},
{
"cve": "CVE-2014-3156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3156"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the clipboard implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger unexpected bitmap data, related to content/renderer/renderer_clipboard_client.cc and content/renderer/webclipboard_impl.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3156",
"url": "https://www.suse.com/security/cve/CVE-2014-3156"
},
{
"category": "external",
"summary": "SUSE Bug 882264 for CVE-2014-3156",
"url": "https://bugzilla.suse.com/882264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3156"
},
{
"cve": "CVE-2014-3157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3157"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3157",
"url": "https://www.suse.com/security/cve/CVE-2014-3157"
},
{
"category": "external",
"summary": "SUSE Bug 882265 for CVE-2014-3157",
"url": "https://bugzilla.suse.com/882265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3157"
},
{
"cve": "CVE-2014-3160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3160"
}
],
"notes": [
{
"category": "general",
"text": "The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3160",
"url": "https://www.suse.com/security/cve/CVE-2014-3160"
},
{
"category": "external",
"summary": "SUSE Bug 887952 for CVE-2014-3160",
"url": "https://bugzilla.suse.com/887952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3160"
},
{
"cve": "CVE-2014-3162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3162"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.125 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3162",
"url": "https://www.suse.com/security/cve/CVE-2014-3162"
},
{
"category": "external",
"summary": "SUSE Bug 887955 for CVE-2014-3162",
"url": "https://bugzilla.suse.com/887955"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3162"
},
{
"cve": "CVE-2014-3165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3165"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in modules/websockets/WorkerThreadableWebSocketChannel.cpp in the Web Sockets implementation in Blink, as used in Google Chrome before 36.0.1985.143, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an unexpectedly long lifetime of a temporary object during method completion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3165",
"url": "https://www.suse.com/security/cve/CVE-2014-3165"
},
{
"category": "external",
"summary": "SUSE Bug 891717 for CVE-2014-3165",
"url": "https://bugzilla.suse.com/891717"
},
{
"category": "external",
"summary": "SUSE Bug 891772 for CVE-2014-3165",
"url": "https://bugzilla.suse.com/891772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3165"
},
{
"cve": "CVE-2014-3166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3166"
}
],
"notes": [
{
"category": "general",
"text": "The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not correctly consider the properties of SPDY connections, which allows remote attackers to obtain sensitive information by leveraging the use of multiple domain names.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3166",
"url": "https://www.suse.com/security/cve/CVE-2014-3166"
},
{
"category": "external",
"summary": "SUSE Bug 891717 for CVE-2014-3166",
"url": "https://bugzilla.suse.com/891717"
},
{
"category": "external",
"summary": "SUSE Bug 891772 for CVE-2014-3166",
"url": "https://bugzilla.suse.com/891772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3166"
},
{
"cve": "CVE-2014-3167",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3167"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3167",
"url": "https://www.suse.com/security/cve/CVE-2014-3167"
},
{
"category": "external",
"summary": "SUSE Bug 891717 for CVE-2014-3167",
"url": "https://bugzilla.suse.com/891717"
},
{
"category": "external",
"summary": "SUSE Bug 891772 for CVE-2014-3167",
"url": "https://bugzilla.suse.com/891772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3167"
},
{
"cve": "CVE-2014-3168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3168"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3168",
"url": "https://www.suse.com/security/cve/CVE-2014-3168"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3168",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3168"
},
{
"cve": "CVE-2014-3169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3169"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging script execution that occurs before notification of node removal.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3169",
"url": "https://www.suse.com/security/cve/CVE-2014-3169"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3169",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3169"
},
{
"cve": "CVE-2014-3170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3170"
}
],
"notes": [
{
"category": "general",
"text": "extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a \u0027\\0\u0027 character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3170",
"url": "https://www.suse.com/security/cve/CVE-2014-3170"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3170",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3170"
},
{
"cve": "CVE-2014-3171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3171"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3171",
"url": "https://www.suse.com/security/cve/CVE-2014-3171"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3171",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3171"
},
{
"cve": "CVE-2014-3172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3172"
}
],
"notes": [
{
"category": "general",
"text": "The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab\u0027s URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as demonstrated by a chrome:// URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3172",
"url": "https://www.suse.com/security/cve/CVE-2014-3172"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3172",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3172"
},
{
"cve": "CVE-2014-3173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3173"
}
],
"notes": [
{
"category": "general",
"text": "The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service (read of uninitialized memory) via a crafted CANVAS element, related to gpu/command_buffer/service/framebuffer_manager.cc and gpu/command_buffer/service/gles2_cmd_decoder.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3173",
"url": "https://www.suse.com/security/cve/CVE-2014-3173"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3173",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3173"
},
{
"cve": "CVE-2014-3174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3174"
}
],
"notes": [
{
"category": "general",
"text": "modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3174",
"url": "https://www.suse.com/security/cve/CVE-2014-3174"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3174",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3174"
},
{
"cve": "CVE-2014-3175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3175"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3175",
"url": "https://www.suse.com/security/cve/CVE-2014-3175"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3175",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3175"
},
{
"cve": "CVE-2014-3176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3176"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3176",
"url": "https://www.suse.com/security/cve/CVE-2014-3176"
},
{
"category": "external",
"summary": "SUSE Bug 893720 for CVE-2014-3176",
"url": "https://bugzilla.suse.com/893720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3176"
},
{
"cve": "CVE-2014-3178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3178"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome before 37.0.2062.120, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of render-tree inconsistencies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3178",
"url": "https://www.suse.com/security/cve/CVE-2014-3178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3178"
},
{
"cve": "CVE-2014-3188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3188"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3188",
"url": "https://www.suse.com/security/cve/CVE-2014-3188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3188"
},
{
"cve": "CVE-2014-3189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3189"
}
],
"notes": [
{
"category": "general",
"text": "The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3189",
"url": "https://www.suse.com/security/cve/CVE-2014-3189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3189"
},
{
"cve": "CVE-2014-3190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3190"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that accesses the path property of an Event object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3190",
"url": "https://www.suse.com/security/cve/CVE-2014-3190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3190"
},
{
"cve": "CVE-2014-3191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3191"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers a widget-position update that improperly interacts with the render tree, related to the FrameView::updateLayoutAndStyleForPainting function in core/frame/FrameView.cpp and the RenderLayerScrollableArea::setScrollOffset function in core/rendering/RenderLayerScrollableArea.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3191",
"url": "https://www.suse.com/security/cve/CVE-2014-3191"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3191"
},
{
"cve": "CVE-2014-3192",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3192"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3192",
"url": "https://www.suse.com/security/cve/CVE-2014-3192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3192"
},
{
"cve": "CVE-2014-3193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3193"
}
],
"notes": [
{
"category": "general",
"text": "The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors that leverage \"type confusion\" for callback processing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3193",
"url": "https://www.suse.com/security/cve/CVE-2014-3193"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3193"
},
{
"cve": "CVE-2014-3194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3194"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3194",
"url": "https://www.suse.com/security/cve/CVE-2014-3194"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3194"
},
{
"cve": "CVE-2014-3195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3195"
}
],
"notes": [
{
"category": "general",
"text": "Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized memory and does not properly concatenate arrays of double-precision floating-point numbers, which allows remote attackers to obtain sensitive information via crafted JavaScript code, related to the PagedSpace::AllocateRaw and NewSpace::AllocateRaw functions in heap/spaces-inl.h, the LargeObjectSpace::AllocateRaw function in heap/spaces.cc, and the Runtime_ArrayConcat function in runtime.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3195",
"url": "https://www.suse.com/security/cve/CVE-2014-3195"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3195"
},
{
"cve": "CVE-2014-3196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3196"
}
],
"notes": [
{
"category": "general",
"text": "base/memory/shared_memory_win.cc in Google Chrome before 38.0.2125.101 on Windows does not properly implement read-only restrictions on shared memory, which allows attackers to bypass a sandbox protection mechanism via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3196",
"url": "https://www.suse.com/security/cve/CVE-2014-3196"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-3196"
},
{
"cve": "CVE-2014-3197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3197"
}
],
"notes": [
{
"category": "general",
"text": "The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3197",
"url": "https://www.suse.com/security/cve/CVE-2014-3197"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3197"
},
{
"cve": "CVE-2014-3198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3198"
}
],
"notes": [
{
"category": "general",
"text": "The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3198",
"url": "https://www.suse.com/security/cve/CVE-2014-3198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3198"
},
{
"cve": "CVE-2014-3199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3199"
}
],
"notes": [
{
"category": "general",
"text": "The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote attackers to cause a denial of service via vectors that trigger stopping a worker process that had been handling an Event object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3199",
"url": "https://www.suse.com/security/cve/CVE-2014-3199"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3199"
},
{
"cve": "CVE-2014-3200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3200"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3200",
"url": "https://www.suse.com/security/cve/CVE-2014-3200"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-3200"
},
{
"cve": "CVE-2014-7899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7899"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7899",
"url": "https://www.suse.com/security/cve/CVE-2014-7899"
},
{
"category": "external",
"summary": "SUSE Bug 906320 for CVE-2014-7899",
"url": "https://bugzilla.suse.com/906320"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-7899"
},
{
"cve": "CVE-2014-7900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7900"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser/fpdf_parser_parser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7900",
"url": "https://www.suse.com/security/cve/CVE-2014-7900"
},
{
"category": "external",
"summary": "SUSE Bug 906317 for CVE-2014-7900",
"url": "https://bugzilla.suse.com/906317"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7900"
},
{
"cve": "CVE-2014-7901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7901"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long segment in a JPEG image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7901",
"url": "https://www.suse.com/security/cve/CVE-2014-7901"
},
{
"category": "external",
"summary": "SUSE Bug 906322 for CVE-2014-7901",
"url": "https://bugzilla.suse.com/906322"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7901"
},
{
"cve": "CVE-2014-7902",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7902"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7902",
"url": "https://www.suse.com/security/cve/CVE-2014-7902"
},
{
"category": "external",
"summary": "SUSE Bug 906328 for CVE-2014-7902",
"url": "https://bugzilla.suse.com/906328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7902"
},
{
"cve": "CVE-2014-7903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7903"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7903",
"url": "https://www.suse.com/security/cve/CVE-2014-7903"
},
{
"category": "external",
"summary": "SUSE Bug 906318 for CVE-2014-7903",
"url": "https://bugzilla.suse.com/906318"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7903"
},
{
"cve": "CVE-2014-7904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7904"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7904",
"url": "https://www.suse.com/security/cve/CVE-2014-7904"
},
{
"category": "external",
"summary": "SUSE Bug 906321 for CVE-2014-7904",
"url": "https://bugzilla.suse.com/906321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7904"
},
{
"cve": "CVE-2014-7905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7905"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 39.0.2171.65 on Android does not prevent navigation to a URL in cases where an intent for the URL lacks CATEGORY_BROWSABLE, which allows remote attackers to bypass intended access restrictions via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7905",
"url": "https://www.suse.com/security/cve/CVE-2014-7905"
},
{
"category": "external",
"summary": "SUSE Bug 906330 for CVE-2014-7905",
"url": "https://bugzilla.suse.com/906330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-7905"
},
{
"cve": "CVE-2014-7906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7906"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object\u0027s lifetime.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7906",
"url": "https://www.suse.com/security/cve/CVE-2014-7906"
},
{
"category": "external",
"summary": "SUSE Bug 906319 for CVE-2014-7906",
"url": "https://bugzilla.suse.com/906319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7906"
},
{
"cve": "CVE-2014-7907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7907"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController.cpp in Blink, as used in Google Chrome before 39.0.2171.65, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger improper handling of a detached frame, related to the (1) lock and (2) unlock methods.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7907",
"url": "https://www.suse.com/security/cve/CVE-2014-7907"
},
{
"category": "external",
"summary": "SUSE Bug 906323 for CVE-2014-7907",
"url": "https://bugzilla.suse.com/906323"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7907"
},
{
"cve": "CVE-2014-7908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7908"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a large atom in (1) MPEG-4 or (2) QuickTime .mov data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7908",
"url": "https://www.suse.com/security/cve/CVE-2014-7908"
},
{
"category": "external",
"summary": "SUSE Bug 906324 for CVE-2014-7908",
"url": "https://bugzilla.suse.com/906324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7908"
},
{
"cve": "CVE-2014-7909",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7909"
}
],
"notes": [
{
"category": "general",
"text": "effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7909",
"url": "https://www.suse.com/security/cve/CVE-2014-7909"
},
{
"category": "external",
"summary": "SUSE Bug 906326 for CVE-2014-7909",
"url": "https://bugzilla.suse.com/906326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-7909"
},
{
"cve": "CVE-2014-7910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7910"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7910",
"url": "https://www.suse.com/security/cve/CVE-2014-7910"
},
{
"category": "external",
"summary": "SUSE Bug 906327 for CVE-2014-7910",
"url": "https://bugzilla.suse.com/906327"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7910"
},
{
"cve": "CVE-2014-7923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7923"
}
],
"notes": [
{
"category": "general",
"text": "The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7923",
"url": "https://www.suse.com/security/cve/CVE-2014-7923"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7923",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7923"
},
{
"cve": "CVE-2014-7924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7924"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7924",
"url": "https://www.suse.com/security/cve/CVE-2014-7924"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7924",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7924"
},
{
"cve": "CVE-2014-7925",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7925"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7925",
"url": "https://www.suse.com/security/cve/CVE-2014-7925"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7925",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7925"
},
{
"cve": "CVE-2014-7926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7926"
}
],
"notes": [
{
"category": "general",
"text": "The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7926",
"url": "https://www.suse.com/security/cve/CVE-2014-7926"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7926",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7926"
},
{
"cve": "CVE-2014-7927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7927"
}
],
"notes": [
{
"category": "general",
"text": "The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7927",
"url": "https://www.suse.com/security/cve/CVE-2014-7927"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7927",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7927"
},
{
"cve": "CVE-2014-7928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7928"
}
],
"notes": [
{
"category": "general",
"text": "hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7928",
"url": "https://www.suse.com/security/cve/CVE-2014-7928"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7928",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7928"
},
{
"cve": "CVE-2014-7929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7929"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7929",
"url": "https://www.suse.com/security/cve/CVE-2014-7929"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7929",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7929"
},
{
"cve": "CVE-2014-7930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7930"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of TreeScope data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7930",
"url": "https://www.suse.com/security/cve/CVE-2014-7930"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7930",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7930"
},
{
"cve": "CVE-2014-7932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7932"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7932",
"url": "https://www.suse.com/security/cve/CVE-2014-7932"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7932",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7932"
},
{
"cve": "CVE-2014-7933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7933"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7933",
"url": "https://www.suse.com/security/cve/CVE-2014-7933"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7933",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7933"
},
{
"cve": "CVE-2014-7934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7934"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7934",
"url": "https://www.suse.com/security/cve/CVE-2014-7934"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7934",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7934"
},
{
"cve": "CVE-2014-7935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7935"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving utterances from a closed tab.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7935",
"url": "https://www.suse.com/security/cve/CVE-2014-7935"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7935",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7935"
},
{
"cve": "CVE-2014-7936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7936"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that triggers improper maintenance of a zoom bubble.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7936",
"url": "https://www.suse.com/security/cve/CVE-2014-7936"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7936",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7936"
},
{
"cve": "CVE-2014-7937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7937"
}
],
"notes": [
{
"category": "general",
"text": "Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7937",
"url": "https://www.suse.com/security/cve/CVE-2014-7937"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7937",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7937"
},
{
"cve": "CVE-2014-7938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7938"
}
],
"notes": [
{
"category": "general",
"text": "The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7938",
"url": "https://www.suse.com/security/cve/CVE-2014-7938"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7938",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7938"
},
{
"cve": "CVE-2014-7939",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7939"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an \"X-Content-Type-Options: nosniff\" header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7939",
"url": "https://www.suse.com/security/cve/CVE-2014-7939"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7939",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7939"
},
{
"cve": "CVE-2014-7940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7940"
}
],
"notes": [
{
"category": "general",
"text": "The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7940",
"url": "https://www.suse.com/security/cve/CVE-2014-7940"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7940",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7940"
},
{
"cve": "CVE-2014-7941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7941"
}
],
"notes": [
{
"category": "general",
"text": "The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7941",
"url": "https://www.suse.com/security/cve/CVE-2014-7941"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7941",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7941"
},
{
"cve": "CVE-2014-7942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7942"
}
],
"notes": [
{
"category": "general",
"text": "The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7942",
"url": "https://www.suse.com/security/cve/CVE-2014-7942"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7942",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7942"
},
{
"cve": "CVE-2014-7943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7943"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7943",
"url": "https://www.suse.com/security/cve/CVE-2014-7943"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7943",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7943"
},
{
"cve": "CVE-2014-7944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7944"
}
],
"notes": [
{
"category": "general",
"text": "The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly handle odd values of image width, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7944",
"url": "https://www.suse.com/security/cve/CVE-2014-7944"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7944",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7944"
},
{
"cve": "CVE-2014-7945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7945"
}
],
"notes": [
{
"category": "general",
"text": "OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, and t2.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7945",
"url": "https://www.suse.com/security/cve/CVE-2014-7945"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7945",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7945"
},
{
"cve": "CVE-2014-7946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7946"
}
],
"notes": [
{
"category": "general",
"text": "The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.91, skips captions during table layout in certain situations, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors related to the Fonts implementation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7946",
"url": "https://www.suse.com/security/cve/CVE-2014-7946"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7946",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7946"
},
{
"cve": "CVE-2014-7947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7947"
}
],
"notes": [
{
"category": "general",
"text": "OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7947",
"url": "https://www.suse.com/security/cve/CVE-2014-7947"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7947",
"url": "https://bugzilla.suse.com/914468"
},
{
"category": "external",
"summary": "SUSE Bug 979911 for CVE-2014-7947",
"url": "https://bugzilla.suse.com/979911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7947"
},
{
"cve": "CVE-2014-7948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7948"
}
],
"notes": [
{
"category": "general",
"text": "The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Google Chrome before 40.0.2214.91 proceeds with AppCache caching for SSL sessions even if there is an X.509 certificate error, which allows man-in-the-middle attackers to spoof HTML5 application content via a crafted certificate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7948",
"url": "https://www.suse.com/security/cve/CVE-2014-7948"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2014-7948",
"url": "https://bugzilla.suse.com/914468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7948"
},
{
"cve": "CVE-2015-1205",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1205"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1205",
"url": "https://www.suse.com/security/cve/CVE-2015-1205"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2015-1205",
"url": "https://bugzilla.suse.com/914468"
},
{
"category": "external",
"summary": "SUSE Bug 915529 for CVE-2015-1205",
"url": "https://bugzilla.suse.com/915529"
},
{
"category": "external",
"summary": "SUSE Bug 915530 for CVE-2015-1205",
"url": "https://bugzilla.suse.com/915530"
},
{
"category": "external",
"summary": "SUSE Bug 915533 for CVE-2015-1205",
"url": "https://bugzilla.suse.com/915533"
},
{
"category": "external",
"summary": "SUSE Bug 915534 for CVE-2015-1205",
"url": "https://bugzilla.suse.com/915534"
},
{
"category": "external",
"summary": "SUSE Bug 915535 for CVE-2015-1205",
"url": "https://bugzilla.suse.com/915535"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1205"
},
{
"cve": "CVE-2015-1209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1209"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper handling of a shadow-root anchor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1209",
"url": "https://www.suse.com/security/cve/CVE-2015-1209"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2015-1209",
"url": "https://bugzilla.suse.com/914468"
},
{
"category": "external",
"summary": "SUSE Bug 916841 for CVE-2015-1209",
"url": "https://bugzilla.suse.com/916841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1209"
},
{
"cve": "CVE-2015-1210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1210"
}
],
"notes": [
{
"category": "general",
"text": "The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1210",
"url": "https://www.suse.com/security/cve/CVE-2015-1210"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2015-1210",
"url": "https://bugzilla.suse.com/914468"
},
{
"category": "external",
"summary": "SUSE Bug 916843 for CVE-2015-1210",
"url": "https://bugzilla.suse.com/916843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1210"
},
{
"cve": "CVE-2015-1211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1211"
}
],
"notes": [
{
"category": "general",
"text": "The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict the URI scheme during a ServiceWorker registration, which allows remote attackers to gain privileges via a filesystem: URI.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1211",
"url": "https://www.suse.com/security/cve/CVE-2015-1211"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2015-1211",
"url": "https://bugzilla.suse.com/914468"
},
{
"category": "external",
"summary": "SUSE Bug 916838 for CVE-2015-1211",
"url": "https://bugzilla.suse.com/916838"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1211"
},
{
"cve": "CVE-2015-1212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1212"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1212",
"url": "https://www.suse.com/security/cve/CVE-2015-1212"
},
{
"category": "external",
"summary": "SUSE Bug 914468 for CVE-2015-1212",
"url": "https://bugzilla.suse.com/914468"
},
{
"category": "external",
"summary": "SUSE Bug 916840 for CVE-2015-1212",
"url": "https://bugzilla.suse.com/916840"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1212",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1212"
},
{
"cve": "CVE-2015-1213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1213"
}
],
"notes": [
{
"category": "general",
"text": "The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1213",
"url": "https://www.suse.com/security/cve/CVE-2015-1213"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1213",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1213"
},
{
"cve": "CVE-2015-1214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1214"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1214",
"url": "https://www.suse.com/security/cve/CVE-2015-1214"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1214",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1214"
},
{
"cve": "CVE-2015-1215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1215"
}
],
"notes": [
{
"category": "general",
"text": "The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1215",
"url": "https://www.suse.com/security/cve/CVE-2015-1215"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1215",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1215"
},
{
"cve": "CVE-2015-1216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1216"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1216",
"url": "https://www.suse.com/security/cve/CVE-2015-1216"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1216",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1216"
},
{
"cve": "CVE-2015-1217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1217"
}
],
"notes": [
{
"category": "general",
"text": "The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1217",
"url": "https://www.suse.com/security/cve/CVE-2015-1217"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1217",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1217"
},
{
"cve": "CVE-2015-1218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1218"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1218",
"url": "https://www.suse.com/security/cve/CVE-2015-1218"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1218",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1218"
},
{
"cve": "CVE-2015-1219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1219"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted allocation of a large amount of memory during WebGL rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1219",
"url": "https://www.suse.com/security/cve/CVE-2015-1219"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1219",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1219"
},
{
"cve": "CVE-2015-1220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1220"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1220",
"url": "https://www.suse.com/security/cve/CVE-2015-1220"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1220",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1220"
},
{
"cve": "CVE-2015-1221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1221"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink\u0027s main thread, related to the shutdown function in web/WebKit.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1221",
"url": "https://www.suse.com/security/cve/CVE-2015-1221"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1221",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1221"
},
{
"cve": "CVE-2015-1222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1222"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cache_map.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a ServiceWorkerContextWrapper::DeleteAndStartOver call, related to the NotifyStartedCaching and NotifyFinishedCaching functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1222",
"url": "https://www.suse.com/security/cve/CVE-2015-1222"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1222",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1222"
},
{
"cve": "CVE-2015-1223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1223"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1223",
"url": "https://www.suse.com/security/cve/CVE-2015-1223"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1223",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1223"
},
{
"cve": "CVE-2015-1224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1224"
}
],
"notes": [
{
"category": "general",
"text": "The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted VPx video data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1224",
"url": "https://www.suse.com/security/cve/CVE-2015-1224"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1224",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1224"
},
{
"cve": "CVE-2015-1225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1225"
}
],
"notes": [
{
"category": "general",
"text": "PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1225",
"url": "https://www.suse.com/security/cve/CVE-2015-1225"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1225",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1225"
},
{
"cve": "CVE-2015-1226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1226"
}
],
"notes": [
{
"category": "general",
"text": "The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 41.0.2272.76 does not properly restrict what URLs are available as debugger targets, which allows remote attackers to bypass intended access restrictions via a crafted extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1226",
"url": "https://www.suse.com/security/cve/CVE-2015-1226"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1226",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1226"
},
{
"cve": "CVE-2015-1227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1227"
}
],
"notes": [
{
"category": "general",
"text": "The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which the default orientation cannot be used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1227",
"url": "https://www.suse.com/security/cve/CVE-2015-1227"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1227",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1227"
},
{
"cve": "CVE-2015-1228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1228"
}
],
"notes": [
{
"category": "general",
"text": "The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1228",
"url": "https://www.suse.com/security/cve/CVE-2015-1228"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1228",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1228"
},
{
"cve": "CVE-2015-1229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1229"
}
],
"notes": [
{
"category": "general",
"text": "net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1229",
"url": "https://www.suse.com/security/cve/CVE-2015-1229"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1229",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1229"
},
{
"cve": "CVE-2015-1230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1230"
}
],
"notes": [
{
"category": "general",
"text": "The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1230",
"url": "https://www.suse.com/security/cve/CVE-2015-1230"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1230",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1230"
},
{
"cve": "CVE-2015-1231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1231"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1231",
"url": "https://www.suse.com/security/cve/CVE-2015-1231"
},
{
"category": "external",
"summary": "SUSE Bug 920825 for CVE-2015-1231",
"url": "https://bugzilla.suse.com/920825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1231"
},
{
"cve": "CVE-2015-1233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1233"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1233",
"url": "https://www.suse.com/security/cve/CVE-2015-1233"
},
{
"category": "external",
"summary": "SUSE Bug 925713 for CVE-2015-1233",
"url": "https://bugzilla.suse.com/925713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1233"
},
{
"cve": "CVE-2015-1234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1234"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1234",
"url": "https://www.suse.com/security/cve/CVE-2015-1234"
},
{
"category": "external",
"summary": "SUSE Bug 925714 for CVE-2015-1234",
"url": "https://bugzilla.suse.com/925714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1234"
},
{
"cve": "CVE-2015-1235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1235"
}
],
"notes": [
{
"category": "general",
"text": "The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1235",
"url": "https://www.suse.com/security/cve/CVE-2015-1235"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1235",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1235"
},
{
"cve": "CVE-2015-1236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1236"
}
],
"notes": [
{
"category": "general",
"text": "The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1236",
"url": "https://www.suse.com/security/cve/CVE-2015-1236"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1236",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1236"
},
{
"cve": "CVE-2015-1237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1237"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1237",
"url": "https://www.suse.com/security/cve/CVE-2015-1237"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1237",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1237"
},
{
"cve": "CVE-2015-1238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1238"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1238",
"url": "https://www.suse.com/security/cve/CVE-2015-1238"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1238",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1238"
},
{
"cve": "CVE-2015-1240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1240"
}
],
"notes": [
{
"category": "general",
"text": "gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1240",
"url": "https://www.suse.com/security/cve/CVE-2015-1240"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1240",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1240"
},
{
"cve": "CVE-2015-1241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1241"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a \"tapjacking\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1241",
"url": "https://www.suse.com/security/cve/CVE-2015-1241"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1241",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1241"
},
{
"cve": "CVE-2015-1242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1242"
}
],
"notes": [
{
"category": "general",
"text": "The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages \"type confusion\" in the check-elimination optimization.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1242",
"url": "https://www.suse.com/security/cve/CVE-2015-1242"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1242",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1242"
},
{
"cve": "CVE-2015-1243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1243"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1243",
"url": "https://www.suse.com/security/cve/CVE-2015-1243"
},
{
"category": "external",
"summary": "SUSE Bug 929075 for CVE-2015-1243",
"url": "https://bugzilla.suse.com/929075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1243"
},
{
"cve": "CVE-2015-1244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1244"
}
],
"notes": [
{
"category": "general",
"text": "The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1244",
"url": "https://www.suse.com/security/cve/CVE-2015-1244"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1244",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1244"
},
{
"cve": "CVE-2015-1245",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1245"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium \"Open PDF in Reader\" button that has an invalid tab association.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1245",
"url": "https://www.suse.com/security/cve/CVE-2015-1245"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1245",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1245"
},
{
"cve": "CVE-2015-1246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1246"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1246",
"url": "https://www.suse.com/security/cve/CVE-2015-1246"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1246",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1246"
},
{
"cve": "CVE-2015-1247",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1247"
}
],
"notes": [
{
"category": "general",
"text": "The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines/search_engine_tab_helper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local files via a crafted (1) http or (2) https web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1247",
"url": "https://www.suse.com/security/cve/CVE-2015-1247"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1247",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1247"
},
{
"cve": "CVE-2015-1248",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1248"
}
],
"notes": [
{
"category": "general",
"text": "The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1248",
"url": "https://www.suse.com/security/cve/CVE-2015-1248"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1248",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1248"
},
{
"cve": "CVE-2015-1249",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1249"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1249",
"url": "https://www.suse.com/security/cve/CVE-2015-1249"
},
{
"category": "external",
"summary": "SUSE Bug 927302 for CVE-2015-1249",
"url": "https://bugzilla.suse.com/927302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1249"
},
{
"cve": "CVE-2015-1250",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1250"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1250",
"url": "https://www.suse.com/security/cve/CVE-2015-1250"
},
{
"category": "external",
"summary": "SUSE Bug 929075 for CVE-2015-1250",
"url": "https://bugzilla.suse.com/929075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1250"
},
{
"cve": "CVE-2015-1251",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1251"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1251",
"url": "https://www.suse.com/security/cve/CVE-2015-1251"
},
{
"category": "external",
"summary": "SUSE Bug 931659 for CVE-2015-1251",
"url": "https://bugzilla.suse.com/931659"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1251"
},
{
"cve": "CVE-2015-1252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1252"
}
],
"notes": [
{
"category": "general",
"text": "common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1252",
"url": "https://www.suse.com/security/cve/CVE-2015-1252"
},
{
"category": "external",
"summary": "SUSE Bug 931671 for CVE-2015-1252",
"url": "https://bugzilla.suse.com/931671"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1252"
},
{
"cve": "CVE-2015-1253",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1253"
}
],
"notes": [
{
"category": "general",
"text": "core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1253",
"url": "https://www.suse.com/security/cve/CVE-2015-1253"
},
{
"category": "external",
"summary": "SUSE Bug 931670 for CVE-2015-1253",
"url": "https://bugzilla.suse.com/931670"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1253"
},
{
"cve": "CVE-2015-1254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1254"
}
],
"notes": [
{
"category": "general",
"text": "core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1254",
"url": "https://www.suse.com/security/cve/CVE-2015-1254"
},
{
"category": "external",
"summary": "SUSE Bug 931669 for CVE-2015-1254",
"url": "https://bugzilla.suse.com/931669"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1254"
},
{
"cve": "CVE-2015-1255",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1255"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging improper handling of a stop action for an audio track.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1255",
"url": "https://www.suse.com/security/cve/CVE-2015-1255"
},
{
"category": "external",
"summary": "SUSE Bug 931674 for CVE-2015-1255",
"url": "https://bugzilla.suse.com/931674"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1255"
},
{
"cve": "CVE-2015-1256",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1256"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1256",
"url": "https://www.suse.com/security/cve/CVE-2015-1256"
},
{
"category": "external",
"summary": "SUSE Bug 931664 for CVE-2015-1256",
"url": "https://bugzilla.suse.com/931664"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1256"
},
{
"cve": "CVE-2015-1257",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1257"
}
],
"notes": [
{
"category": "general",
"text": "platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1257",
"url": "https://www.suse.com/security/cve/CVE-2015-1257"
},
{
"category": "external",
"summary": "SUSE Bug 931665 for CVE-2015-1257",
"url": "https://bugzilla.suse.com/931665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1257"
},
{
"cve": "CVE-2015-1258",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1258"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1258",
"url": "https://www.suse.com/security/cve/CVE-2015-1258"
},
{
"category": "external",
"summary": "SUSE Bug 931666 for CVE-2015-1258",
"url": "https://bugzilla.suse.com/931666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1258"
},
{
"cve": "CVE-2015-1259",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1259"
}
],
"notes": [
{
"category": "general",
"text": "PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1259",
"url": "https://www.suse.com/security/cve/CVE-2015-1259"
},
{
"category": "external",
"summary": "SUSE Bug 931667 for CVE-2015-1259",
"url": "https://bugzilla.suse.com/931667"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1259"
},
{
"cve": "CVE-2015-1260",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1260"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a getUserMedia request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1260",
"url": "https://www.suse.com/security/cve/CVE-2015-1260"
},
{
"category": "external",
"summary": "SUSE Bug 931668 for CVE-2015-1260",
"url": "https://bugzilla.suse.com/931668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1260"
},
{
"cve": "CVE-2015-1261",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1261"
}
],
"notes": [
{
"category": "general",
"text": "android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL\u0027s fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading popup content via crafted text.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1261",
"url": "https://www.suse.com/security/cve/CVE-2015-1261"
},
{
"category": "external",
"summary": "SUSE Bug 931673 for CVE-2015-1261",
"url": "https://bugzilla.suse.com/931673"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1261"
},
{
"cve": "CVE-2015-1262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1262"
}
],
"notes": [
{
"category": "general",
"text": "platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1262",
"url": "https://www.suse.com/security/cve/CVE-2015-1262"
},
{
"category": "external",
"summary": "SUSE Bug 931672 for CVE-2015-1262",
"url": "https://bugzilla.suse.com/931672"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1262"
},
{
"cve": "CVE-2015-1263",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1263"
}
],
"notes": [
{
"category": "general",
"text": "The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1263",
"url": "https://www.suse.com/security/cve/CVE-2015-1263"
},
{
"category": "external",
"summary": "SUSE Bug 931663 for CVE-2015-1263",
"url": "https://bugzilla.suse.com/931663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1263"
},
{
"cve": "CVE-2015-1264",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1264"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is improperly handled by the Bookmarks feature.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1264",
"url": "https://www.suse.com/security/cve/CVE-2015-1264"
},
{
"category": "external",
"summary": "SUSE Bug 931661 for CVE-2015-1264",
"url": "https://bugzilla.suse.com/931661"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1264"
},
{
"cve": "CVE-2015-1265",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1265"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1265",
"url": "https://www.suse.com/security/cve/CVE-2015-1265"
},
{
"category": "external",
"summary": "SUSE Bug 931660 for CVE-2015-1265",
"url": "https://bugzilla.suse.com/931660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1265"
},
{
"cve": "CVE-2015-1266",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1266"
}
],
"notes": [
{
"category": "general",
"text": "content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1266",
"url": "https://www.suse.com/security/cve/CVE-2015-1266"
},
{
"category": "external",
"summary": "SUSE Bug 935723 for CVE-2015-1266",
"url": "https://bugzilla.suse.com/935723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1266"
},
{
"cve": "CVE-2015-1267",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1267"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1267",
"url": "https://www.suse.com/security/cve/CVE-2015-1267"
},
{
"category": "external",
"summary": "SUSE Bug 935723 for CVE-2015-1267",
"url": "https://bugzilla.suse.com/935723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1267"
},
{
"cve": "CVE-2015-1268",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1268"
}
],
"notes": [
{
"category": "general",
"text": "bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value\u0027s DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1268",
"url": "https://www.suse.com/security/cve/CVE-2015-1268"
},
{
"category": "external",
"summary": "SUSE Bug 935723 for CVE-2015-1268",
"url": "https://bugzilla.suse.com/935723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1268"
},
{
"cve": "CVE-2015-1269",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1269"
}
],
"notes": [
{
"category": "general",
"text": "The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1269",
"url": "https://www.suse.com/security/cve/CVE-2015-1269"
},
{
"category": "external",
"summary": "SUSE Bug 935723 for CVE-2015-1269",
"url": "https://bugzilla.suse.com/935723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1269"
},
{
"cve": "CVE-2015-1270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1270"
}
],
"notes": [
{
"category": "general",
"text": "The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1270",
"url": "https://www.suse.com/security/cve/CVE-2015-1270"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1270",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1270"
},
{
"cve": "CVE-2015-1271",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1271"
}
],
"notes": [
{
"category": "general",
"text": "PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1271",
"url": "https://www.suse.com/security/cve/CVE-2015-1271"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1271",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1271"
},
{
"cve": "CVE-2015-1272",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1272"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown, related to content/browser/gpu/browser_gpu_channel_host_factory.cc and content/renderer/render_thread_impl.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1272",
"url": "https://www.suse.com/security/cve/CVE-2015-1272"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1272",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1272"
},
{
"cve": "CVE-2015-1273",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1273"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1273",
"url": "https://www.suse.com/security/cve/CVE-2015-1273"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1273",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1273"
},
{
"cve": "CVE-2015-1274",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1274"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user\u0027s previous \"Always open files of this type\" choice, related to download_commands.cc and download_prefs.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1274",
"url": "https://www.suse.com/security/cve/CVE-2015-1274"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1274",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1274"
},
{
"cve": "CVE-2015-1275",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1275"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alert(document.cookie);// substring, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1275",
"url": "https://www.suse.com/security/cve/CVE-2015-1275"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1275",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1275"
},
{
"cve": "CVE-2015-1276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1276"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1276",
"url": "https://www.suse.com/security/cve/CVE-2015-1276"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1276",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1276"
},
{
"cve": "CVE-2015-1277",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1277"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1277",
"url": "https://www.suse.com/security/cve/CVE-2015-1277"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1277",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1277"
},
{
"cve": "CVE-2015-1278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1278"
}
],
"notes": [
{
"category": "general",
"text": "content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document\u0027s modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alert_dialog.pdf document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1278",
"url": "https://www.suse.com/security/cve/CVE-2015-1278"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1278",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1278"
},
{
"cve": "CVE-2015-1279",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1279"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1279",
"url": "https://www.suse.com/security/cve/CVE-2015-1279"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1279",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1279"
},
{
"cve": "CVE-2015-1280",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1280"
}
],
"notes": [
{
"category": "general",
"text": "SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1280",
"url": "https://www.suse.com/security/cve/CVE-2015-1280"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1280",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1280"
},
{
"cve": "CVE-2015-1281",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1281"
}
],
"notes": [
{
"category": "general",
"text": "core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to bypass Content Security Policy (CSP) restrictions by providing an image from an unintended source.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1281",
"url": "https://www.suse.com/security/cve/CVE-2015-1281"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1281",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1281"
},
{
"cve": "CVE-2015-1282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1282"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the (1) Document::delay and (2) Document::DoFieldDelay functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1282",
"url": "https://www.suse.com/security/cve/CVE-2015-1282"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1282",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1282"
},
{
"cve": "CVE-2015-1283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1283"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1283",
"url": "https://www.suse.com/security/cve/CVE-2015-1283"
},
{
"category": "external",
"summary": "SUSE Bug 1034050 for CVE-2015-1283",
"url": "https://bugzilla.suse.com/1034050"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1283",
"url": "https://bugzilla.suse.com/939077"
},
{
"category": "external",
"summary": "SUSE Bug 979441 for CVE-2015-1283",
"url": "https://bugzilla.suse.com/979441"
},
{
"category": "external",
"summary": "SUSE Bug 980391 for CVE-2015-1283",
"url": "https://bugzilla.suse.com/980391"
},
{
"category": "external",
"summary": "SUSE Bug 983985 for CVE-2015-1283",
"url": "https://bugzilla.suse.com/983985"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1283"
},
{
"cve": "CVE-2015-1284",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1284"
}
],
"notes": [
{
"category": "general",
"text": "The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly check for a page\u0027s maximum number of frames, which allows remote attackers to cause a denial of service (invalid count value and use-after-free) or possibly have unspecified other impact via crafted JavaScript code that makes many createElement calls for IFRAME elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1284",
"url": "https://www.suse.com/security/cve/CVE-2015-1284"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1284",
"url": "https://bugzilla.suse.com/939077"
},
{
"category": "external",
"summary": "SUSE Bug 959178 for CVE-2015-1284",
"url": "https://bugzilla.suse.com/959178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1284"
},
{
"cve": "CVE-2015-1285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1285"
}
],
"notes": [
{
"category": "general",
"text": "The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not properly choose a truncation point, which makes it easier for remote attackers to obtain sensitive information via an unspecified linear-time attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1285",
"url": "https://www.suse.com/security/cve/CVE-2015-1285"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1285",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1285"
},
{
"cve": "CVE-2015-1286",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1286"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context restriction, aka a Blink \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1286",
"url": "https://www.suse.com/security/cve/CVE-2015-1286"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1286",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1286"
},
{
"cve": "CVE-2015-1287",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1287"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to core/fetch/CSSStyleSheetResource.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1287",
"url": "https://www.suse.com/security/cve/CVE-2015-1287"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1287",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1287"
},
{
"cve": "CVE-2015-1288",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1288"
}
],
"notes": [
{
"category": "general",
"text": "The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file, a related issue to CVE-2015-1263.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1288",
"url": "https://www.suse.com/security/cve/CVE-2015-1288"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1288",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1288"
},
{
"cve": "CVE-2015-1289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1289"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1289",
"url": "https://www.suse.com/security/cve/CVE-2015-1289"
},
{
"category": "external",
"summary": "SUSE Bug 939077 for CVE-2015-1289",
"url": "https://bugzilla.suse.com/939077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-1289"
},
{
"cve": "CVE-2015-1291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1291"
}
],
"notes": [
{
"category": "general",
"text": "The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with crafted JavaScript code and IFRAME elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1291",
"url": "https://www.suse.com/security/cve/CVE-2015-1291"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1291",
"url": "https://bugzilla.suse.com/944144"
},
{
"category": "external",
"summary": "SUSE Bug 959178 for CVE-2015-1291",
"url": "https://bugzilla.suse.com/959178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1291"
},
{
"cve": "CVE-2015-1292",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1292"
}
],
"notes": [
{
"category": "general",
"text": "The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1292",
"url": "https://www.suse.com/security/cve/CVE-2015-1292"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1292",
"url": "https://bugzilla.suse.com/944144"
},
{
"category": "external",
"summary": "SUSE Bug 959178 for CVE-2015-1292",
"url": "https://bugzilla.suse.com/959178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1292"
},
{
"cve": "CVE-2015-1293",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1293"
}
],
"notes": [
{
"category": "general",
"text": "The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1293",
"url": "https://www.suse.com/security/cve/CVE-2015-1293"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1293",
"url": "https://bugzilla.suse.com/944144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1293"
},
{
"cve": "CVE-2015-1294",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1294"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Skia, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering the use of matrix elements that lead to an infinite result during an inversion calculation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1294",
"url": "https://www.suse.com/security/cve/CVE-2015-1294"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1294",
"url": "https://bugzilla.suse.com/944144"
},
{
"category": "external",
"summary": "SUSE Bug 959178 for CVE-2015-1294",
"url": "https://bugzilla.suse.com/959178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1294"
},
{
"cve": "CVE-2015-1295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1295"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/print_web_view_helper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC messages during preparation for printing, as demonstrated by messages associated with PDF documents in conjunction with messages about printer capabilities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1295",
"url": "https://www.suse.com/security/cve/CVE-2015-1295"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1295",
"url": "https://bugzilla.suse.com/944144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1295"
},
{
"cve": "CVE-2015-1296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1296"
}
],
"notes": [
{
"category": "general",
"text": "The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a URL, as demonstrated by the omnibox in localizations for right-to-left languages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1296",
"url": "https://www.suse.com/security/cve/CVE-2015-1296"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1296",
"url": "https://bugzilla.suse.com/944144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1296"
},
{
"cve": "CVE-2015-1297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1297"
}
],
"notes": [
{
"category": "general",
"text": "The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a request\u0027s source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted (1) app or (2) extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1297",
"url": "https://www.suse.com/security/cve/CVE-2015-1297"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1297",
"url": "https://bugzilla.suse.com/944144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1297"
},
{
"cve": "CVE-2015-1298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1298"
}
],
"notes": [
{
"category": "general",
"text": "The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to an arbitrary URL via a crafted extension that is uninstalled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1298",
"url": "https://www.suse.com/security/cve/CVE-2015-1298"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1298",
"url": "https://bugzilla.suse.com/944144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1298"
},
{
"cve": "CVE-2015-1299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1299"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1299",
"url": "https://www.suse.com/security/cve/CVE-2015-1299"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1299",
"url": "https://bugzilla.suse.com/944144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1299"
},
{
"cve": "CVE-2015-1300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1300"
}
],
"notes": [
{
"category": "general",
"text": "The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to obtain sensitive information via crafted JavaScript code that leverages a history.back call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1300",
"url": "https://www.suse.com/security/cve/CVE-2015-1300"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1300",
"url": "https://bugzilla.suse.com/944144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1300"
},
{
"cve": "CVE-2015-1301",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1301"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1301",
"url": "https://www.suse.com/security/cve/CVE-2015-1301"
},
{
"category": "external",
"summary": "SUSE Bug 944144 for CVE-2015-1301",
"url": "https://bugzilla.suse.com/944144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1301"
},
{
"cve": "CVE-2015-1302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1302"
}
],
"notes": [
{
"category": "general",
"text": "The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and out_of_process_instance.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1302",
"url": "https://www.suse.com/security/cve/CVE-2015-1302"
},
{
"category": "external",
"summary": "SUSE Bug 954579 for CVE-2015-1302",
"url": "https://bugzilla.suse.com/954579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1302"
},
{
"cve": "CVE-2015-1303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1303"
}
],
"notes": [
{
"category": "general",
"text": "bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1303",
"url": "https://www.suse.com/security/cve/CVE-2015-1303"
},
{
"category": "external",
"summary": "SUSE Bug 947504 for CVE-2015-1303",
"url": "https://bugzilla.suse.com/947504"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1303"
},
{
"cve": "CVE-2015-1304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1304"
}
],
"notes": [
{
"category": "general",
"text": "object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1304",
"url": "https://www.suse.com/security/cve/CVE-2015-1304"
},
{
"category": "external",
"summary": "SUSE Bug 947507 for CVE-2015-1304",
"url": "https://bugzilla.suse.com/947507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1304"
},
{
"cve": "CVE-2015-6755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6755"
}
],
"notes": [
{
"category": "general",
"text": "The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6755",
"url": "https://www.suse.com/security/cve/CVE-2015-6755"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6755",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6755"
},
{
"cve": "CVE-2015-6756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6756"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging mishandling of a focused annotation in a PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6756",
"url": "https://www.suse.com/security/cve/CVE-2015-6756"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6756",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6756"
},
{
"cve": "CVE-2015-6757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6757"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6757",
"url": "https://www.suse.com/security/cve/CVE-2015-6757"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6757",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6757"
},
{
"cve": "CVE-2015-6758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6758"
}
],
"notes": [
{
"category": "general",
"text": "The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6758",
"url": "https://www.suse.com/security/cve/CVE-2015-6758"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6758",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6758"
},
{
"cve": "CVE-2015-6759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6759"
}
],
"notes": [
{
"category": "general",
"text": "The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6759",
"url": "https://www.suse.com/security/cve/CVE-2015-6759"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6759",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6759"
},
{
"cve": "CVE-2015-6760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6760"
}
],
"notes": [
{
"category": "general",
"text": "The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service (invalid read or write) or possibly have unspecified other impact via vectors involving a removed device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6760",
"url": "https://www.suse.com/security/cve/CVE-2015-6760"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6760",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6760"
},
{
"cve": "CVE-2015-6761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6761"
}
],
"notes": [
{
"category": "general",
"text": "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6761",
"url": "https://www.suse.com/security/cve/CVE-2015-6761"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6761",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6761"
},
{
"cve": "CVE-2015-6762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6762"
}
],
"notes": [
{
"category": "general",
"text": "The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font\u0027s URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6762",
"url": "https://www.suse.com/security/cve/CVE-2015-6762"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6762",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6762"
},
{
"cve": "CVE-2015-6763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6763"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6763",
"url": "https://www.suse.com/security/cve/CVE-2015-6763"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-6763",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6763"
},
{
"cve": "CVE-2015-6764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6764"
}
],
"notes": [
{
"category": "general",
"text": "The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6764",
"url": "https://www.suse.com/security/cve/CVE-2015-6764"
},
{
"category": "external",
"summary": "SUSE Bug 956902 for CVE-2015-6764",
"url": "https://bugzilla.suse.com/956902"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6764",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-6764"
},
{
"cve": "CVE-2015-6765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6765"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6765",
"url": "https://www.suse.com/security/cve/CVE-2015-6765"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6765",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-6765"
},
{
"cve": "CVE-2015-6766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6766"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache selection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6766",
"url": "https://www.suse.com/security/cve/CVE-2015-6766"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6766",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6766"
},
{
"cve": "CVE-2015-6767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6767"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect pointer maintenance associated with certain callbacks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6767",
"url": "https://www.suse.com/security/cve/CVE-2015-6767"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6767",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6767"
},
{
"cve": "CVE-2015-6768",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6768"
}
],
"notes": [
{
"category": "general",
"text": "The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6770.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6768",
"url": "https://www.suse.com/security/cve/CVE-2015-6768"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6768",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6768"
},
{
"cve": "CVE-2015-6769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6769"
}
],
"notes": [
{
"category": "general",
"text": "The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6769",
"url": "https://www.suse.com/security/cve/CVE-2015-6769"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6769",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6769"
},
{
"cve": "CVE-2015-6770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6770"
}
],
"notes": [
{
"category": "general",
"text": "The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6770",
"url": "https://www.suse.com/security/cve/CVE-2015-6770"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6770",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6770"
},
{
"cve": "CVE-2015-6771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6771"
}
],
"notes": [
{
"category": "general",
"text": "js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6771",
"url": "https://www.suse.com/security/cve/CVE-2015-6771"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6771",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6771"
},
{
"cve": "CVE-2015-6772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6772"
}
],
"notes": [
{
"category": "general",
"text": "The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6772",
"url": "https://www.suse.com/security/cve/CVE-2015-6772"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6772",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6772"
},
{
"cve": "CVE-2015-6773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6773"
}
],
"notes": [
{
"category": "general",
"text": "The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted graphics data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6773",
"url": "https://www.suse.com/security/cve/CVE-2015-6773"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6773",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6773"
},
{
"cve": "CVE-2015-6774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6774"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that modifies a pointer used for reporting loadTimes data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6774",
"url": "https://www.suse.com/security/cve/CVE-2015-6774"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6774",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6774"
},
{
"cve": "CVE-2015-6775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6775"
}
],
"notes": [
{
"category": "general",
"text": "fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6775",
"url": "https://www.suse.com/security/cve/CVE-2015-6775"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6775",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6775"
},
{
"cve": "CVE-2015-6776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6776"
}
],
"notes": [
{
"category": "general",
"text": "The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavelet transform.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6776",
"url": "https://www.suse.com/security/cve/CVE-2015-6776"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6776",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6776"
},
{
"cve": "CVE-2015-6777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6777"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOMCharacterDataModified events for certain detached-subtree insertions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6777",
"url": "https://www.suse.com/security/cve/CVE-2015-6777"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6777",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6777"
},
{
"cve": "CVE-2015-6778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6778"
}
],
"notes": [
{
"category": "general",
"text": "The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2 compression.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6778",
"url": "https://www.suse.com/security/cve/CVE-2015-6778"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6778",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6778"
},
{
"cve": "CVE-2015-6779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6779"
}
],
"notes": [
{
"category": "general",
"text": "PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6779",
"url": "https://www.suse.com/security/cve/CVE-2015-6779"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6779",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6779"
},
{
"cve": "CVE-2015-6780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6780"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/website_settings/website_settings_popup_view.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6780",
"url": "https://www.suse.com/security/cve/CVE-2015-6780"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6780",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6780"
},
{
"cve": "CVE-2015-6781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6781"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT container.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6781",
"url": "https://www.suse.com/security/cve/CVE-2015-6781"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6781",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6781"
},
{
"cve": "CVE-2015-6782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6782"
}
],
"notes": [
{
"category": "general",
"text": "The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6782",
"url": "https://www.suse.com/security/cve/CVE-2015-6782"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6782",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6782"
},
{
"cve": "CVE-2015-6783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6783"
}
],
"notes": [
{
"category": "general",
"text": "The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6783",
"url": "https://www.suse.com/security/cve/CVE-2015-6783"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6783",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6783"
},
{
"cve": "CVE-2015-6784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6784"
}
],
"notes": [
{
"category": "general",
"text": "The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a \"--\" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6784",
"url": "https://www.suse.com/security/cve/CVE-2015-6784"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6784",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6784"
},
{
"cve": "CVE-2015-6785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6785"
}
],
"notes": [
{
"category": "general",
"text": "The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a policy that was intended to be specific to subdomains.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6785",
"url": "https://www.suse.com/security/cve/CVE-2015-6785"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6785",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6785"
},
{
"cve": "CVE-2015-6786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6786"
}
],
"notes": [
{
"category": "general",
"text": "The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, which allows remote attackers to bypass intended scheme restrictions in opportunistic circumstances by leveraging a policy that relies on this pattern.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6786",
"url": "https://www.suse.com/security/cve/CVE-2015-6786"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6786",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6786"
},
{
"cve": "CVE-2015-6787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6787"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6787",
"url": "https://www.suse.com/security/cve/CVE-2015-6787"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6787",
"url": "https://bugzilla.suse.com/957519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-6787"
},
{
"cve": "CVE-2015-6788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6788"
}
],
"notes": [
{
"category": "general",
"text": "The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6788",
"url": "https://www.suse.com/security/cve/CVE-2015-6788"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6788",
"url": "https://bugzilla.suse.com/957519"
},
{
"category": "external",
"summary": "SUSE Bug 958481 for CVE-2015-6788",
"url": "https://bugzilla.suse.com/958481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-6788"
},
{
"cve": "CVE-2015-6789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6789"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6789",
"url": "https://www.suse.com/security/cve/CVE-2015-6789"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6789",
"url": "https://bugzilla.suse.com/957519"
},
{
"category": "external",
"summary": "SUSE Bug 958481 for CVE-2015-6789",
"url": "https://bugzilla.suse.com/958481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-6789"
},
{
"cve": "CVE-2015-6790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6790"
}
],
"notes": [
{
"category": "general",
"text": "The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6790",
"url": "https://www.suse.com/security/cve/CVE-2015-6790"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6790",
"url": "https://bugzilla.suse.com/957519"
},
{
"category": "external",
"summary": "SUSE Bug 958481 for CVE-2015-6790",
"url": "https://bugzilla.suse.com/958481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6790"
},
{
"cve": "CVE-2015-6791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6791"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6791",
"url": "https://www.suse.com/security/cve/CVE-2015-6791"
},
{
"category": "external",
"summary": "SUSE Bug 957519 for CVE-2015-6791",
"url": "https://bugzilla.suse.com/957519"
},
{
"category": "external",
"summary": "SUSE Bug 958481 for CVE-2015-6791",
"url": "https://bugzilla.suse.com/958481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-6791"
},
{
"cve": "CVE-2015-6792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6792"
}
],
"notes": [
{
"category": "general",
"text": "The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6792",
"url": "https://www.suse.com/security/cve/CVE-2015-6792"
},
{
"category": "external",
"summary": "SUSE Bug 959458 for CVE-2015-6792",
"url": "https://bugzilla.suse.com/959458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-6792"
},
{
"cve": "CVE-2015-7834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7834"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7834",
"url": "https://www.suse.com/security/cve/CVE-2015-7834"
},
{
"category": "external",
"summary": "SUSE Bug 950290 for CVE-2015-7834",
"url": "https://bugzilla.suse.com/950290"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7834"
},
{
"cve": "CVE-2015-8126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8126"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8126",
"url": "https://www.suse.com/security/cve/CVE-2015-8126"
},
{
"category": "external",
"summary": "SUSE Bug 954980 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/954980"
},
{
"category": "external",
"summary": "SUSE Bug 958198 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/958198"
},
{
"category": "external",
"summary": "SUSE Bug 960402 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/960402"
},
{
"category": "external",
"summary": "SUSE Bug 962743 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/962743"
},
{
"category": "external",
"summary": "SUSE Bug 963937 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/963937"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8126"
},
{
"cve": "CVE-2016-1612",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1612"
}
],
"notes": [
{
"category": "general",
"text": "The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1612",
"url": "https://www.suse.com/security/cve/CVE-2016-1612"
},
{
"category": "external",
"summary": "SUSE Bug 963184 for CVE-2016-1612",
"url": "https://bugzilla.suse.com/963184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1612"
},
{
"cve": "CVE-2016-1613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1613"
}
],
"notes": [
{
"category": "general",
"text": "Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking of the destruction of (1) IPWL_FocusHandler and (2) IPWL_Provider objects.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1613",
"url": "https://www.suse.com/security/cve/CVE-2016-1613"
},
{
"category": "external",
"summary": "SUSE Bug 963185 for CVE-2016-1613",
"url": "https://bugzilla.suse.com/963185"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1613"
},
{
"cve": "CVE-2016-1614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1614"
}
],
"notes": [
{
"category": "general",
"text": "The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1614",
"url": "https://www.suse.com/security/cve/CVE-2016-1614"
},
{
"category": "external",
"summary": "SUSE Bug 963186 for CVE-2016-1614",
"url": "https://bugzilla.suse.com/963186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1614"
},
{
"cve": "CVE-2016-1615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1615"
}
],
"notes": [
{
"category": "general",
"text": "The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document\u0027s origin via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1615",
"url": "https://www.suse.com/security/cve/CVE-2016-1615"
},
{
"category": "external",
"summary": "SUSE Bug 963187 for CVE-2016-1615",
"url": "https://bugzilla.suse.com/963187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1615"
},
{
"cve": "CVE-2016-1616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1616"
}
],
"notes": [
{
"category": "general",
"text": "The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1616",
"url": "https://www.suse.com/security/cve/CVE-2016-1616"
},
{
"category": "external",
"summary": "SUSE Bug 963188 for CVE-2016-1616",
"url": "https://bugzilla.suse.com/963188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1616"
},
{
"cve": "CVE-2016-1617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1617"
}
],
"notes": [
{
"category": "general",
"text": "The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1617",
"url": "https://www.suse.com/security/cve/CVE-2016-1617"
},
{
"category": "external",
"summary": "SUSE Bug 963189 for CVE-2016-1617",
"url": "https://bugzilla.suse.com/963189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1617"
},
{
"cve": "CVE-2016-1618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1618"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1618",
"url": "https://www.suse.com/security/cve/CVE-2016-1618"
},
{
"category": "external",
"summary": "SUSE Bug 963190 for CVE-2016-1618",
"url": "https://bugzilla.suse.com/963190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1618"
},
{
"cve": "CVE-2016-1619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1619"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1619",
"url": "https://www.suse.com/security/cve/CVE-2016-1619"
},
{
"category": "external",
"summary": "SUSE Bug 963191 for CVE-2016-1619",
"url": "https://bugzilla.suse.com/963191"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1619"
},
{
"cve": "CVE-2016-1620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1620"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1620",
"url": "https://www.suse.com/security/cve/CVE-2016-1620"
},
{
"category": "external",
"summary": "SUSE Bug 963192 for CVE-2016-1620",
"url": "https://bugzilla.suse.com/963192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1620"
},
{
"cve": "CVE-2016-1622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1622"
}
],
"notes": [
{
"category": "general",
"text": "The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1622",
"url": "https://www.suse.com/security/cve/CVE-2016-1622"
},
{
"category": "external",
"summary": "SUSE Bug 965999 for CVE-2016-1622",
"url": "https://bugzilla.suse.com/965999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1622"
},
{
"cve": "CVE-2016-1623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1623"
}
],
"notes": [
{
"category": "general",
"text": "The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1623",
"url": "https://www.suse.com/security/cve/CVE-2016-1623"
},
{
"category": "external",
"summary": "SUSE Bug 965999 for CVE-2016-1623",
"url": "https://bugzilla.suse.com/965999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1623"
},
{
"cve": "CVE-2016-1624",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1624"
}
],
"notes": [
{
"category": "general",
"text": "Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1624",
"url": "https://www.suse.com/security/cve/CVE-2016-1624"
},
{
"category": "external",
"summary": "SUSE Bug 965999 for CVE-2016-1624",
"url": "https://bugzilla.suse.com/965999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1624"
},
{
"cve": "CVE-2016-1625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1625"
}
],
"notes": [
{
"category": "general",
"text": "The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1625",
"url": "https://www.suse.com/security/cve/CVE-2016-1625"
},
{
"category": "external",
"summary": "SUSE Bug 965999 for CVE-2016-1625",
"url": "https://bugzilla.suse.com/965999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1625"
},
{
"cve": "CVE-2016-1626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1626"
}
],
"notes": [
{
"category": "general",
"text": "The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1626",
"url": "https://www.suse.com/security/cve/CVE-2016-1626"
},
{
"category": "external",
"summary": "SUSE Bug 965999 for CVE-2016-1626",
"url": "https://bugzilla.suse.com/965999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1626"
},
{
"cve": "CVE-2016-1627",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1627"
}
],
"notes": [
{
"category": "general",
"text": "The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteBase parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL, related to browser/devtools/devtools_ui_bindings.cc and WebKit/Source/devtools/front_end/Runtime.js.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1627",
"url": "https://www.suse.com/security/cve/CVE-2016-1627"
},
{
"category": "external",
"summary": "SUSE Bug 965999 for CVE-2016-1627",
"url": "https://bugzilla.suse.com/965999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1627"
},
{
"cve": "CVE-2016-1629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1629"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1629",
"url": "https://www.suse.com/security/cve/CVE-2016-1629"
},
{
"category": "external",
"summary": "SUSE Bug 967376 for CVE-2016-1629",
"url": "https://bugzilla.suse.com/967376"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1629"
},
{
"cve": "CVE-2016-1630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1630"
}
],
"notes": [
{
"category": "general",
"text": "The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1630",
"url": "https://www.suse.com/security/cve/CVE-2016-1630"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1630",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1630"
},
{
"cve": "CVE-2016-1631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1631"
}
],
"notes": [
{
"category": "general",
"text": "The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loops, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1631",
"url": "https://www.suse.com/security/cve/CVE-2016-1631"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1631",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1631"
},
{
"cve": "CVE-2016-1632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1632"
}
],
"notes": [
{
"category": "general",
"text": "The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8_helpers.h and gin/converter.h.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1632",
"url": "https://www.suse.com/security/cve/CVE-2016-1632"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1632",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1632"
},
{
"cve": "CVE-2016-1633",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1633"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1633",
"url": "https://www.suse.com/security/cve/CVE-2016-1633"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1633",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1633"
},
{
"cve": "CVE-2016-1634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1634"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that triggers Cascading Style Sheets (CSS) style invalidation during a certain subtree-removal action.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1634",
"url": "https://www.suse.com/security/cve/CVE-2016-1634"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1634",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1634"
},
{
"cve": "CVE-2016-1635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1635"
}
],
"notes": [
{
"category": "general",
"text": "extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1635",
"url": "https://www.suse.com/security/cve/CVE-2016-1635"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1635",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1635"
},
{
"cve": "CVE-2016-1636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1636"
}
],
"notes": [
{
"category": "general",
"text": "The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity (aka SRI) protection mechanism by triggering two loads of the same resource.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1636",
"url": "https://www.suse.com/security/cve/CVE-2016-1636"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1636",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1636"
},
{
"cve": "CVE-2016-1637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1637"
}
],
"notes": [
{
"category": "general",
"text": "The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctangent calculations, which allows remote attackers to obtain sensitive information via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1637",
"url": "https://www.suse.com/security/cve/CVE-2016-1637"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1637",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1637"
},
{
"cve": "CVE-2016-1638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1638"
}
],
"notes": [
{
"category": "general",
"text": "extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1638",
"url": "https://www.suse.com/security/cve/CVE-2016-1638"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1638",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1638"
},
{
"cve": "CVE-2016-1639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1639"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect reliance on the resource context pointer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1639",
"url": "https://www.suse.com/security/cve/CVE-2016-1639"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1639",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1639"
},
{
"cve": "CVE-2016-1640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1640"
}
],
"notes": [
{
"category": "general",
"text": "The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the user\u0027s next navigation target via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1640",
"url": "https://www.suse.com/security/cve/CVE-2016-1640"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1640",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1640"
},
{
"cve": "CVE-2016-1641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1641"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an image download after a certain data structure is deleted, as demonstrated by a favicon.ico download.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1641",
"url": "https://www.suse.com/security/cve/CVE-2016-1641"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1641",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1641"
},
{
"cve": "CVE-2016-1642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1642"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1642",
"url": "https://www.suse.com/security/cve/CVE-2016-1642"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2016-1642",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1642"
},
{
"cve": "CVE-2016-1643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1643"
}
],
"notes": [
{
"category": "general",
"text": "The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1643",
"url": "https://www.suse.com/security/cve/CVE-2016-1643"
},
{
"category": "external",
"summary": "SUSE Bug 970514 for CVE-2016-1643",
"url": "https://bugzilla.suse.com/970514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1643"
},
{
"cve": "CVE-2016-1644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1644"
}
],
"notes": [
{
"category": "general",
"text": "WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1644",
"url": "https://www.suse.com/security/cve/CVE-2016-1644"
},
{
"category": "external",
"summary": "SUSE Bug 970509 for CVE-2016-1644",
"url": "https://bugzilla.suse.com/970509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1644"
},
{
"cve": "CVE-2016-1645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1645"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect cast and out-of-bounds write) or possibly have unspecified other impact via crafted JPEG 2000 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1645",
"url": "https://www.suse.com/security/cve/CVE-2016-1645"
},
{
"category": "external",
"summary": "SUSE Bug 970511 for CVE-2016-1645",
"url": "https://bugzilla.suse.com/970511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1645"
},
{
"cve": "CVE-2016-1646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1646"
}
],
"notes": [
{
"category": "general",
"text": "The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1646",
"url": "https://www.suse.com/security/cve/CVE-2016-1646"
},
{
"category": "external",
"summary": "SUSE Bug 972834 for CVE-2016-1646",
"url": "https://bugzilla.suse.com/972834"
},
{
"category": "external",
"summary": "SUSE Bug 973166 for CVE-2016-1646",
"url": "https://bugzilla.suse.com/973166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1646"
},
{
"cve": "CVE-2016-1647",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1647"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1647",
"url": "https://www.suse.com/security/cve/CVE-2016-1647"
},
{
"category": "external",
"summary": "SUSE Bug 972834 for CVE-2016-1647",
"url": "https://bugzilla.suse.com/972834"
},
{
"category": "external",
"summary": "SUSE Bug 973166 for CVE-2016-1647",
"url": "https://bugzilla.suse.com/973166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1647"
},
{
"cve": "CVE-2016-1648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1648"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1648",
"url": "https://www.suse.com/security/cve/CVE-2016-1648"
},
{
"category": "external",
"summary": "SUSE Bug 972834 for CVE-2016-1648",
"url": "https://bugzilla.suse.com/972834"
},
{
"category": "external",
"summary": "SUSE Bug 973166 for CVE-2016-1648",
"url": "https://bugzilla.suse.com/973166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1648"
},
{
"cve": "CVE-2016-1649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1649"
}
],
"notes": [
{
"category": "general",
"text": "The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1649",
"url": "https://www.suse.com/security/cve/CVE-2016-1649"
},
{
"category": "external",
"summary": "SUSE Bug 972834 for CVE-2016-1649",
"url": "https://bugzilla.suse.com/972834"
},
{
"category": "external",
"summary": "SUSE Bug 973166 for CVE-2016-1649",
"url": "https://bugzilla.suse.com/973166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1649"
},
{
"cve": "CVE-2016-1650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1650"
}
],
"notes": [
{
"category": "general",
"text": "The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1650",
"url": "https://www.suse.com/security/cve/CVE-2016-1650"
},
{
"category": "external",
"summary": "SUSE Bug 972834 for CVE-2016-1650",
"url": "https://bugzilla.suse.com/972834"
},
{
"category": "external",
"summary": "SUSE Bug 973166 for CVE-2016-1650",
"url": "https://bugzilla.suse.com/973166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1650"
},
{
"cve": "CVE-2016-1651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1651"
}
],
"notes": [
{
"category": "general",
"text": "fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted JPEG 2000 data in a PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1651",
"url": "https://www.suse.com/security/cve/CVE-2016-1651"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1651",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1651"
},
{
"cve": "CVE-2016-1652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1652"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1652",
"url": "https://www.suse.com/security/cve/CVE-2016-1652"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1652",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1652"
},
{
"cve": "CVE-2016-1653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1653"
}
],
"notes": [
{
"category": "general",
"text": "The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipeline.cc and compiler/simplified-lowering.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1653",
"url": "https://www.suse.com/security/cve/CVE-2016-1653"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1653",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1653"
},
{
"cve": "CVE-2016-1654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1654"
}
],
"notes": [
{
"category": "general",
"text": "The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1654",
"url": "https://www.suse.com/security/cve/CVE-2016-1654"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1654",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1654"
},
{
"cve": "CVE-2016-1655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1655"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1655",
"url": "https://www.suse.com/security/cve/CVE-2016-1655"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1655",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1655"
},
{
"cve": "CVE-2016-1656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1656"
}
],
"notes": [
{
"category": "general",
"text": "The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1656",
"url": "https://www.suse.com/security/cve/CVE-2016-1656"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1656",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1656"
},
{
"cve": "CVE-2016-1657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1657"
}
],
"notes": [
{
"category": "general",
"text": "The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1657",
"url": "https://www.suse.com/security/cve/CVE-2016-1657"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1657",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1657"
},
{
"cve": "CVE-2016-1658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1658"
}
],
"notes": [
{
"category": "general",
"text": "The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1658",
"url": "https://www.suse.com/security/cve/CVE-2016-1658"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1658",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1658"
},
{
"cve": "CVE-2016-1659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1659"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1659",
"url": "https://www.suse.com/security/cve/CVE-2016-1659"
},
{
"category": "external",
"summary": "SUSE Bug 975572 for CVE-2016-1659",
"url": "https://bugzilla.suse.com/975572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-1659"
},
{
"cve": "CVE-2016-1660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1660"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1660",
"url": "https://www.suse.com/security/cve/CVE-2016-1660"
},
{
"category": "external",
"summary": "SUSE Bug 977830 for CVE-2016-1660",
"url": "https://bugzilla.suse.com/977830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1660"
},
{
"cve": "CVE-2016-1661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1661"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1661",
"url": "https://www.suse.com/security/cve/CVE-2016-1661"
},
{
"category": "external",
"summary": "SUSE Bug 977830 for CVE-2016-1661",
"url": "https://bugzilla.suse.com/977830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1661"
},
{
"cve": "CVE-2016-1662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1662"
}
],
"notes": [
{
"category": "general",
"text": "extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1662",
"url": "https://www.suse.com/security/cve/CVE-2016-1662"
},
{
"category": "external",
"summary": "SUSE Bug 977830 for CVE-2016-1662",
"url": "https://bugzilla.suse.com/977830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1662"
},
{
"cve": "CVE-2016-1663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1663"
}
],
"notes": [
{
"category": "general",
"text": "The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1663",
"url": "https://www.suse.com/security/cve/CVE-2016-1663"
},
{
"category": "external",
"summary": "SUSE Bug 977830 for CVE-2016-1663",
"url": "https://bugzilla.suse.com/977830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1663"
},
{
"cve": "CVE-2016-1664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1664"
}
],
"notes": [
{
"category": "general",
"text": "The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1664",
"url": "https://www.suse.com/security/cve/CVE-2016-1664"
},
{
"category": "external",
"summary": "SUSE Bug 977830 for CVE-2016-1664",
"url": "https://bugzilla.suse.com/977830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1664"
},
{
"cve": "CVE-2016-1665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1665"
}
],
"notes": [
{
"category": "general",
"text": "The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1665",
"url": "https://www.suse.com/security/cve/CVE-2016-1665"
},
{
"category": "external",
"summary": "SUSE Bug 977830 for CVE-2016-1665",
"url": "https://bugzilla.suse.com/977830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1665"
},
{
"cve": "CVE-2016-1666",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1666"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1666",
"url": "https://www.suse.com/security/cve/CVE-2016-1666"
},
{
"category": "external",
"summary": "SUSE Bug 977830 for CVE-2016-1666",
"url": "https://bugzilla.suse.com/977830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1666"
},
{
"cve": "CVE-2016-1667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1667"
}
],
"notes": [
{
"category": "general",
"text": "The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1667",
"url": "https://www.suse.com/security/cve/CVE-2016-1667"
},
{
"category": "external",
"summary": "SUSE Bug 979859 for CVE-2016-1667",
"url": "https://bugzilla.suse.com/979859"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1667"
},
{
"cve": "CVE-2016-1668",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1668"
}
],
"notes": [
{
"category": "general",
"text": "The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1668",
"url": "https://www.suse.com/security/cve/CVE-2016-1668"
},
{
"category": "external",
"summary": "SUSE Bug 979859 for CVE-2016-1668",
"url": "https://bugzilla.suse.com/979859"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1668"
},
{
"cve": "CVE-2016-1669",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1669"
}
],
"notes": [
{
"category": "general",
"text": "The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1669",
"url": "https://www.suse.com/security/cve/CVE-2016-1669"
},
{
"category": "external",
"summary": "SUSE Bug 979859 for CVE-2016-1669",
"url": "https://bugzilla.suse.com/979859"
},
{
"category": "external",
"summary": "SUSE Bug 987919 for CVE-2016-1669",
"url": "https://bugzilla.suse.com/987919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1669"
},
{
"cve": "CVE-2016-1670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1670"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1670",
"url": "https://www.suse.com/security/cve/CVE-2016-1670"
},
{
"category": "external",
"summary": "SUSE Bug 979859 for CVE-2016-1670",
"url": "https://bugzilla.suse.com/979859"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1670"
},
{
"cve": "CVE-2016-1672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1672"
}
],
"notes": [
{
"category": "general",
"text": "The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1672",
"url": "https://www.suse.com/security/cve/CVE-2016-1672"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1672",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1672"
},
{
"cve": "CVE-2016-1673",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1673"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1673",
"url": "https://www.suse.com/security/cve/CVE-2016-1673"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1673",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1673"
},
{
"cve": "CVE-2016-1674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1674"
}
],
"notes": [
{
"category": "general",
"text": "The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1674",
"url": "https://www.suse.com/security/cve/CVE-2016-1674"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1674",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1674"
},
{
"cve": "CVE-2016-1675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1675"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1675",
"url": "https://www.suse.com/security/cve/CVE-2016-1675"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1675",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1675"
},
{
"cve": "CVE-2016-1676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1676"
}
],
"notes": [
{
"category": "general",
"text": "extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1676",
"url": "https://www.suse.com/security/cve/CVE-2016-1676"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1676",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1676"
},
{
"cve": "CVE-2016-1677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1677"
}
],
"notes": [
{
"category": "general",
"text": "uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging \"type confusion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1677",
"url": "https://www.suse.com/security/cve/CVE-2016-1677"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1677",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1677"
},
{
"cve": "CVE-2016-1678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1678"
}
],
"notes": [
{
"category": "general",
"text": "objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1678",
"url": "https://www.suse.com/security/cve/CVE-2016-1678"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1678",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1678"
},
{
"cve": "CVE-2016-1679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1679"
}
],
"notes": [
{
"category": "general",
"text": "The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1679",
"url": "https://www.suse.com/security/cve/CVE-2016-1679"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1679",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1679"
},
{
"cve": "CVE-2016-1680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1680"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1680",
"url": "https://www.suse.com/security/cve/CVE-2016-1680"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1680",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1680"
},
{
"cve": "CVE-2016-1681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1681"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1681",
"url": "https://www.suse.com/security/cve/CVE-2016-1681"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1681",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1681"
},
{
"cve": "CVE-2016-1682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1682"
}
],
"notes": [
{
"category": "general",
"text": "The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1682",
"url": "https://www.suse.com/security/cve/CVE-2016-1682"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1682",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1682"
},
{
"cve": "CVE-2016-1683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1683"
}
],
"notes": [
{
"category": "general",
"text": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1683",
"url": "https://www.suse.com/security/cve/CVE-2016-1683"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1683",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1683"
},
{
"cve": "CVE-2016-1684",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1684"
}
],
"notes": [
{
"category": "general",
"text": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1684",
"url": "https://www.suse.com/security/cve/CVE-2016-1684"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1684",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1684"
},
{
"cve": "CVE-2016-1685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1685"
}
],
"notes": [
{
"category": "general",
"text": "core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1685",
"url": "https://www.suse.com/security/cve/CVE-2016-1685"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1685",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1685"
},
{
"cve": "CVE-2016-1686",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1686"
}
],
"notes": [
{
"category": "general",
"text": "The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1686",
"url": "https://www.suse.com/security/cve/CVE-2016-1686"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1686",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1686"
},
{
"cve": "CVE-2016-1687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1687"
}
],
"notes": [
{
"category": "general",
"text": "The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1687",
"url": "https://www.suse.com/security/cve/CVE-2016-1687"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1687",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1687"
},
{
"cve": "CVE-2016-1688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1688"
}
],
"notes": [
{
"category": "general",
"text": "The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1688",
"url": "https://www.suse.com/security/cve/CVE-2016-1688"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1688",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1688"
},
{
"cve": "CVE-2016-1689",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1689"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1689",
"url": "https://www.suse.com/security/cve/CVE-2016-1689"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1689",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1689"
},
{
"cve": "CVE-2016-1690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1690"
}
],
"notes": [
{
"category": "general",
"text": "The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1701.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1690",
"url": "https://www.suse.com/security/cve/CVE-2016-1690"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1690",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1690"
},
{
"cve": "CVE-2016-1691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1691"
}
],
"notes": [
{
"category": "general",
"text": "Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1691",
"url": "https://www.suse.com/security/cve/CVE-2016-1691"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1691",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1691"
},
{
"cve": "CVE-2016-1692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1692"
}
],
"notes": [
{
"category": "general",
"text": "WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1692",
"url": "https://www.suse.com/security/cve/CVE-2016-1692"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1692",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1692"
},
{
"cve": "CVE-2016-1693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1693"
}
],
"notes": [
{
"category": "general",
"text": "browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1693",
"url": "https://www.suse.com/security/cve/CVE-2016-1693"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1693",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1693"
},
{
"cve": "CVE-2016-1694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1694"
}
],
"notes": [
{
"category": "general",
"text": "browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1694",
"url": "https://www.suse.com/security/cve/CVE-2016-1694"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1694",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1694"
},
{
"cve": "CVE-2016-1695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1695"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1695",
"url": "https://www.suse.com/security/cve/CVE-2016-1695"
},
{
"category": "external",
"summary": "SUSE Bug 981886 for CVE-2016-1695",
"url": "https://bugzilla.suse.com/981886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1695"
},
{
"cve": "CVE-2016-1696",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1696"
}
],
"notes": [
{
"category": "general",
"text": "The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1696",
"url": "https://www.suse.com/security/cve/CVE-2016-1696"
},
{
"category": "external",
"summary": "SUSE Bug 982719 for CVE-2016-1696",
"url": "https://bugzilla.suse.com/982719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1696"
},
{
"cve": "CVE-2016-1697",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1697"
}
],
"notes": [
{
"category": "general",
"text": "The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1697",
"url": "https://www.suse.com/security/cve/CVE-2016-1697"
},
{
"category": "external",
"summary": "SUSE Bug 982719 for CVE-2016-1697",
"url": "https://bugzilla.suse.com/982719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1697"
},
{
"cve": "CVE-2016-1698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1698"
}
],
"notes": [
{
"category": "general",
"text": "The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1698",
"url": "https://www.suse.com/security/cve/CVE-2016-1698"
},
{
"category": "external",
"summary": "SUSE Bug 982719 for CVE-2016-1698",
"url": "https://bugzilla.suse.com/982719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1698"
},
{
"cve": "CVE-2016-1699",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1699"
}
],
"notes": [
{
"category": "general",
"text": "WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1699",
"url": "https://www.suse.com/security/cve/CVE-2016-1699"
},
{
"category": "external",
"summary": "SUSE Bug 982719 for CVE-2016-1699",
"url": "https://bugzilla.suse.com/982719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1699"
},
{
"cve": "CVE-2016-1700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1700"
}
],
"notes": [
{
"category": "general",
"text": "extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1700",
"url": "https://www.suse.com/security/cve/CVE-2016-1700"
},
{
"category": "external",
"summary": "SUSE Bug 982719 for CVE-2016-1700",
"url": "https://bugzilla.suse.com/982719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1700"
},
{
"cve": "CVE-2016-1701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1701"
}
],
"notes": [
{
"category": "general",
"text": "The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1690.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1701",
"url": "https://www.suse.com/security/cve/CVE-2016-1701"
},
{
"category": "external",
"summary": "SUSE Bug 982719 for CVE-2016-1701",
"url": "https://bugzilla.suse.com/982719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1701"
},
{
"cve": "CVE-2016-1702",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1702"
}
],
"notes": [
{
"category": "general",
"text": "The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1702",
"url": "https://www.suse.com/security/cve/CVE-2016-1702"
},
{
"category": "external",
"summary": "SUSE Bug 982719 for CVE-2016-1702",
"url": "https://bugzilla.suse.com/982719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1702"
},
{
"cve": "CVE-2016-1703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1703"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1703",
"url": "https://www.suse.com/security/cve/CVE-2016-1703"
},
{
"category": "external",
"summary": "SUSE Bug 982719 for CVE-2016-1703",
"url": "https://bugzilla.suse.com/982719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1703"
},
{
"cve": "CVE-2016-1704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1704"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1704",
"url": "https://www.suse.com/security/cve/CVE-2016-1704"
},
{
"category": "external",
"summary": "SUSE Bug 985397 for CVE-2016-1704",
"url": "https://bugzilla.suse.com/985397"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1704"
},
{
"cve": "CVE-2016-1705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1705"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1705",
"url": "https://www.suse.com/security/cve/CVE-2016-1705"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-1705",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1705"
},
{
"cve": "CVE-2016-1706",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1706"
}
],
"notes": [
{
"category": "general",
"text": "The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1706",
"url": "https://www.suse.com/security/cve/CVE-2016-1706"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-1706",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1706"
},
{
"cve": "CVE-2016-1707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1707"
}
],
"notes": [
{
"category": "general",
"text": "ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1707",
"url": "https://www.suse.com/security/cve/CVE-2016-1707"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-1707",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1707"
},
{
"cve": "CVE-2016-1708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1708"
}
],
"notes": [
{
"category": "general",
"text": "The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1708",
"url": "https://www.suse.com/security/cve/CVE-2016-1708"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-1708",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1708"
},
{
"cve": "CVE-2016-1709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1709"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1709",
"url": "https://www.suse.com/security/cve/CVE-2016-1709"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-1709",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1709"
},
{
"cve": "CVE-2016-1710",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1710"
}
],
"notes": [
{
"category": "general",
"text": "The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1710",
"url": "https://www.suse.com/security/cve/CVE-2016-1710"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-1710",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1710"
},
{
"cve": "CVE-2016-1711",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1711"
}
],
"notes": [
{
"category": "general",
"text": "WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1711",
"url": "https://www.suse.com/security/cve/CVE-2016-1711"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-1711",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1711"
},
{
"cve": "CVE-2016-3679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3679"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3679",
"url": "https://www.suse.com/security/cve/CVE-2016-3679"
},
{
"category": "external",
"summary": "SUSE Bug 972834 for CVE-2016-3679",
"url": "https://bugzilla.suse.com/972834"
},
{
"category": "external",
"summary": "SUSE Bug 973166 for CVE-2016-3679",
"url": "https://bugzilla.suse.com/973166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-3679"
},
{
"cve": "CVE-2016-5127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5127"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascading Style Sheets (CSS) token sequence in conjunction with a rel=import attribute of a LINK element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5127",
"url": "https://www.suse.com/security/cve/CVE-2016-5127"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5127",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5127"
},
{
"cve": "CVE-2016-5128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5128"
}
],
"notes": [
{
"category": "general",
"text": "objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5128",
"url": "https://www.suse.com/security/cve/CVE-2016-5128"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5128",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5128"
},
{
"cve": "CVE-2016-5129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5129"
}
],
"notes": [
{
"category": "general",
"text": "Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5129",
"url": "https://www.suse.com/security/cve/CVE-2016-5129"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5129",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5129"
},
{
"cve": "CVE-2016-5130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5130"
}
],
"notes": [
{
"category": "general",
"text": "content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5130",
"url": "https://www.suse.com/security/cve/CVE-2016-5130"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5130",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5130"
},
{
"cve": "CVE-2016-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5131"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5131",
"url": "https://www.suse.com/security/cve/CVE-2016-5131"
},
{
"category": "external",
"summary": "SUSE Bug 1014873 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1014873"
},
{
"category": "external",
"summary": "SUSE Bug 1069433 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1069433"
},
{
"category": "external",
"summary": "SUSE Bug 1078813 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1078813"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/1123919"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5131",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5131"
},
{
"cve": "CVE-2016-5132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5132"
}
],
"notes": [
{
"category": "general",
"text": "The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5132",
"url": "https://www.suse.com/security/cve/CVE-2016-5132"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5132",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5132"
},
{
"cve": "CVE-2016-5133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5133"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect credential storage by modifying the client-server data stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5133",
"url": "https://www.suse.com/security/cve/CVE-2016-5133"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5133",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5133"
},
{
"cve": "CVE-2016-5134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5134"
}
],
"notes": [
{
"category": "general",
"text": "net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5134",
"url": "https://www.suse.com/security/cve/CVE-2016-5134"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5134",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5134"
},
{
"cve": "CVE-2016-5135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5135"
}
],
"notes": [
{
"category": "general",
"text": "WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a \"Content-Security-Policy: referrer origin-when-cross-origin\" header that overrides a \"\u003cMETA name=\u0027referrer\u0027 content=\u0027no-referrer\u0027\u003e\" element.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5135",
"url": "https://www.suse.com/security/cve/CVE-2016-5135"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5135",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5135"
},
{
"cve": "CVE-2016-5136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5136"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to script deletion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5136",
"url": "https://www.suse.com/security/cve/CVE-2016-5136"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5136",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5136"
},
{
"cve": "CVE-2016-5137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5137"
}
],
"notes": [
{
"category": "general",
"text": "The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report. NOTE: this vulnerability is associated with a specification change after CVE-2016-1617 resolution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5137",
"url": "https://www.suse.com/security/cve/CVE-2016-5137"
},
{
"category": "external",
"summary": "SUSE Bug 989901 for CVE-2016-5137",
"url": "https://bugzilla.suse.com/989901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5137"
},
{
"cve": "CVE-2016-5139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5139"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5139",
"url": "https://www.suse.com/security/cve/CVE-2016-5139"
},
{
"category": "external",
"summary": "SUSE Bug 992305 for CVE-2016-5139",
"url": "https://bugzilla.suse.com/992305"
},
{
"category": "external",
"summary": "SUSE Bug 992311 for CVE-2016-5139",
"url": "https://bugzilla.suse.com/992311"
},
{
"category": "external",
"summary": "SUSE Bug 992325 for CVE-2016-5139",
"url": "https://bugzilla.suse.com/992325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5139"
},
{
"cve": "CVE-2016-5140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5140"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5140",
"url": "https://www.suse.com/security/cve/CVE-2016-5140"
},
{
"category": "external",
"summary": "SUSE Bug 992305 for CVE-2016-5140",
"url": "https://bugzilla.suse.com/992305"
},
{
"category": "external",
"summary": "SUSE Bug 992310 for CVE-2016-5140",
"url": "https://bugzilla.suse.com/992310"
},
{
"category": "external",
"summary": "SUSE Bug 992325 for CVE-2016-5140",
"url": "https://bugzilla.suse.com/992325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5140"
},
{
"cve": "CVE-2016-5141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5141"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially empty document, related to FrameLoader.cpp and ScopedPageLoadDeferrer.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5141",
"url": "https://www.suse.com/security/cve/CVE-2016-5141"
},
{
"category": "external",
"summary": "SUSE Bug 992305 for CVE-2016-5141",
"url": "https://bugzilla.suse.com/992305"
},
{
"category": "external",
"summary": "SUSE Bug 992314 for CVE-2016-5141",
"url": "https://bugzilla.suse.com/992314"
},
{
"category": "external",
"summary": "SUSE Bug 992325 for CVE-2016-5141",
"url": "https://bugzilla.suse.com/992325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5141"
},
{
"cve": "CVE-2016-5142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5142"
}
],
"notes": [
{
"category": "general",
"text": "The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code, related to NormalizeAlgorithm.cpp and SubtleCrypto.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5142",
"url": "https://www.suse.com/security/cve/CVE-2016-5142"
},
{
"category": "external",
"summary": "SUSE Bug 992305 for CVE-2016-5142",
"url": "https://bugzilla.suse.com/992305"
},
{
"category": "external",
"summary": "SUSE Bug 992313 for CVE-2016-5142",
"url": "https://bugzilla.suse.com/992313"
},
{
"category": "external",
"summary": "SUSE Bug 992325 for CVE-2016-5142",
"url": "https://bugzilla.suse.com/992325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5142"
},
{
"cve": "CVE-2016-5143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5143"
}
],
"notes": [
{
"category": "general",
"text": "The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5144.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5143",
"url": "https://www.suse.com/security/cve/CVE-2016-5143"
},
{
"category": "external",
"summary": "SUSE Bug 992305 for CVE-2016-5143",
"url": "https://bugzilla.suse.com/992305"
},
{
"category": "external",
"summary": "SUSE Bug 992319 for CVE-2016-5143",
"url": "https://bugzilla.suse.com/992319"
},
{
"category": "external",
"summary": "SUSE Bug 992325 for CVE-2016-5143",
"url": "https://bugzilla.suse.com/992325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5143"
},
{
"cve": "CVE-2016-5144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5144"
}
],
"notes": [
{
"category": "general",
"text": "The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5144",
"url": "https://www.suse.com/security/cve/CVE-2016-5144"
},
{
"category": "external",
"summary": "SUSE Bug 992305 for CVE-2016-5144",
"url": "https://bugzilla.suse.com/992305"
},
{
"category": "external",
"summary": "SUSE Bug 992315 for CVE-2016-5144",
"url": "https://bugzilla.suse.com/992315"
},
{
"category": "external",
"summary": "SUSE Bug 992325 for CVE-2016-5144",
"url": "https://bugzilla.suse.com/992325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5144"
},
{
"cve": "CVE-2016-5145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5145"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5145",
"url": "https://www.suse.com/security/cve/CVE-2016-5145"
},
{
"category": "external",
"summary": "SUSE Bug 992305 for CVE-2016-5145",
"url": "https://bugzilla.suse.com/992305"
},
{
"category": "external",
"summary": "SUSE Bug 992320 for CVE-2016-5145",
"url": "https://bugzilla.suse.com/992320"
},
{
"category": "external",
"summary": "SUSE Bug 992325 for CVE-2016-5145",
"url": "https://bugzilla.suse.com/992325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5145"
},
{
"cve": "CVE-2016-5146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5146"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5146",
"url": "https://www.suse.com/security/cve/CVE-2016-5146"
},
{
"category": "external",
"summary": "SUSE Bug 992305 for CVE-2016-5146",
"url": "https://bugzilla.suse.com/992305"
},
{
"category": "external",
"summary": "SUSE Bug 992309 for CVE-2016-5146",
"url": "https://bugzilla.suse.com/992309"
},
{
"category": "external",
"summary": "SUSE Bug 992325 for CVE-2016-5146",
"url": "https://bugzilla.suse.com/992325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5146"
},
{
"cve": "CVE-2016-5147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5147"
}
],
"notes": [
{
"category": "general",
"text": "Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5147",
"url": "https://www.suse.com/security/cve/CVE-2016-5147"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5147",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5147"
},
{
"cve": "CVE-2016-5148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5148"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5148",
"url": "https://www.suse.com/security/cve/CVE-2016-5148"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5148",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5148"
},
{
"cve": "CVE-2016-5149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5149"
}
],
"notes": [
{
"category": "general",
"text": "The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5149",
"url": "https://www.suse.com/security/cve/CVE-2016-5149"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5149",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5149"
},
{
"cve": "CVE-2016-5150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5150"
}
],
"notes": [
{
"category": "general",
"text": "WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5150",
"url": "https://www.suse.com/security/cve/CVE-2016-5150"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5150",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5150"
},
{
"cve": "CVE-2016-5151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5151"
}
],
"notes": [
{
"category": "general",
"text": "PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5151",
"url": "https://www.suse.com/security/cve/CVE-2016-5151"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5151",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5151"
},
{
"cve": "CVE-2016-5152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5152"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5152",
"url": "https://www.suse.com/security/cve/CVE-2016-5152"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5152",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5152"
},
{
"cve": "CVE-2016-5153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5153"
}
],
"notes": [
{
"category": "general",
"text": "The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5153",
"url": "https://www.suse.com/security/cve/CVE-2016-5153"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5153",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5153"
},
{
"cve": "CVE-2016-5154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5154"
}
],
"notes": [
{
"category": "general",
"text": "Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5154",
"url": "https://www.suse.com/security/cve/CVE-2016-5154"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5154",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5154"
},
{
"cve": "CVE-2016-5155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5155"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5155",
"url": "https://www.suse.com/security/cve/CVE-2016-5155"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5155",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5155"
},
{
"cve": "CVE-2016-5156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5156"
}
],
"notes": [
{
"category": "general",
"text": "extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5156",
"url": "https://www.suse.com/security/cve/CVE-2016-5156"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5156",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5156"
},
{
"cve": "CVE-2016-5157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5157"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5157",
"url": "https://www.suse.com/security/cve/CVE-2016-5157"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5157",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5157"
},
{
"cve": "CVE-2016-5158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5158"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5158",
"url": "https://www.suse.com/security/cve/CVE-2016-5158"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5158",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5158"
},
{
"cve": "CVE-2016-5159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5159"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5159",
"url": "https://www.suse.com/security/cve/CVE-2016-5159"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5159",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5159"
},
{
"cve": "CVE-2016-5160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5160"
}
],
"notes": [
{
"category": "general",
"text": "The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension\u0027s manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5162.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5160",
"url": "https://www.suse.com/security/cve/CVE-2016-5160"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5160",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5160"
},
{
"cve": "CVE-2016-5161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5161"
}
],
"notes": [
{
"category": "general",
"text": "The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that leverages \"type confusion\" in the StylePropertySerializer class.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5161",
"url": "https://www.suse.com/security/cve/CVE-2016-5161"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5161",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5161"
},
{
"cve": "CVE-2016-5162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5162"
}
],
"notes": [
{
"category": "general",
"text": "The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension\u0027s manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5162",
"url": "https://www.suse.com/security/cve/CVE-2016-5162"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5162",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5162"
},
{
"cve": "CVE-2016-5163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5163"
}
],
"notes": [
{
"category": "general",
"text": "The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5163",
"url": "https://www.suse.com/security/cve/CVE-2016-5163"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5163",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5163"
},
{
"cve": "CVE-2016-5164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5164"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka \"Universal XSS (UXSS).\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5164",
"url": "https://www.suse.com/security/cve/CVE-2016-5164"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5164",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5164"
},
{
"cve": "CVE-2016-5165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5165"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL\u0027s query string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5165",
"url": "https://www.suse.com/security/cve/CVE-2016-5165"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5165",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5165"
},
{
"cve": "CVE-2016-5166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5166"
}
],
"notes": [
{
"category": "general",
"text": "The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the \"Save page as\" menu choice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5166",
"url": "https://www.suse.com/security/cve/CVE-2016-5166"
},
{
"category": "external",
"summary": "SUSE Bug 996648 for CVE-2016-5166",
"url": "https://bugzilla.suse.com/996648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5166"
},
{
"cve": "CVE-2016-5170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5170"
}
],
"notes": [
{
"category": "general",
"text": "WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Indexed Database (aka IndexedDB) API calls.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5170",
"url": "https://www.suse.com/security/cve/CVE-2016-5170"
},
{
"category": "external",
"summary": "SUSE Bug 998743 for CVE-2016-5170",
"url": "https://bugzilla.suse.com/998743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5170"
},
{
"cve": "CVE-2016-5171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5171"
}
],
"notes": [
{
"category": "general",
"text": "WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5171",
"url": "https://www.suse.com/security/cve/CVE-2016-5171"
},
{
"category": "external",
"summary": "SUSE Bug 998743 for CVE-2016-5171",
"url": "https://bugzilla.suse.com/998743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5171"
},
{
"cve": "CVE-2016-5172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5172"
}
],
"notes": [
{
"category": "general",
"text": "The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5172",
"url": "https://www.suse.com/security/cve/CVE-2016-5172"
},
{
"category": "external",
"summary": "SUSE Bug 998743 for CVE-2016-5172",
"url": "https://bugzilla.suse.com/998743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5172"
},
{
"cve": "CVE-2016-5173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5173"
}
],
"notes": [
{
"category": "general",
"text": "The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect interception attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5173",
"url": "https://www.suse.com/security/cve/CVE-2016-5173"
},
{
"category": "external",
"summary": "SUSE Bug 998743 for CVE-2016-5173",
"url": "https://bugzilla.suse.com/998743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5173"
},
{
"cve": "CVE-2016-5174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5174"
}
],
"notes": [
{
"category": "general",
"text": "browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen transition, which allows remote attackers to cause a denial of service (unsuppressed popup) via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5174",
"url": "https://www.suse.com/security/cve/CVE-2016-5174"
},
{
"category": "external",
"summary": "SUSE Bug 998743 for CVE-2016-5174",
"url": "https://bugzilla.suse.com/998743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5174"
},
{
"cve": "CVE-2016-5175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5175"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5175",
"url": "https://www.suse.com/security/cve/CVE-2016-5175"
},
{
"category": "external",
"summary": "SUSE Bug 998743 for CVE-2016-5175",
"url": "https://bugzilla.suse.com/998743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5175"
},
{
"cve": "CVE-2016-5177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5177"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5177",
"url": "https://www.suse.com/security/cve/CVE-2016-5177"
},
{
"category": "external",
"summary": "SUSE Bug 1002140 for CVE-2016-5177",
"url": "https://bugzilla.suse.com/1002140"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5177"
},
{
"cve": "CVE-2016-5178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5178"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5178",
"url": "https://www.suse.com/security/cve/CVE-2016-5178"
},
{
"category": "external",
"summary": "SUSE Bug 1002140 for CVE-2016-5178",
"url": "https://bugzilla.suse.com/1002140"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5178"
},
{
"cve": "CVE-2016-5181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5181"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5181",
"url": "https://www.suse.com/security/cve/CVE-2016-5181"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5181",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5181"
},
{
"cve": "CVE-2016-5182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5182"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5182",
"url": "https://www.suse.com/security/cve/CVE-2016-5182"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5182",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5182"
},
{
"cve": "CVE-2016-5183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5183"
}
],
"notes": [
{
"category": "general",
"text": "A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5183",
"url": "https://www.suse.com/security/cve/CVE-2016-5183"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5183",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5183"
},
{
"cve": "CVE-2016-5184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5184"
}
],
"notes": [
{
"category": "general",
"text": "PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potentially exploit heap corruption via crafted PDF files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5184",
"url": "https://www.suse.com/security/cve/CVE-2016-5184"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5184",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5184"
},
{
"cve": "CVE-2016-5185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5185"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal(), which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5185",
"url": "https://www.suse.com/security/cve/CVE-2016-5185"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5185",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5185"
},
{
"cve": "CVE-2016-5186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5186"
}
],
"notes": [
{
"category": "general",
"text": "Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5186",
"url": "https://www.suse.com/security/cve/CVE-2016-5186"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5186",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5186"
},
{
"cve": "CVE-2016-5187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5187"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5187",
"url": "https://www.suse.com/security/cve/CVE-2016-5187"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5187",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5187"
},
{
"cve": "CVE-2016-5188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5188"
}
],
"notes": [
{
"category": "general",
"text": "Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5188",
"url": "https://www.suse.com/security/cve/CVE-2016-5188"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5188",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5188"
},
{
"cve": "CVE-2016-5189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5189"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5189",
"url": "https://www.suse.com/security/cve/CVE-2016-5189"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5189",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5189"
},
{
"cve": "CVE-2016-5190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5190"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5190",
"url": "https://www.suse.com/security/cve/CVE-2016-5190"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5190",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5190"
},
{
"cve": "CVE-2016-5191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5191"
}
],
"notes": [
{
"category": "general",
"text": "Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:payload@example.com URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5191",
"url": "https://www.suse.com/security/cve/CVE-2016-5191"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5191",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5191"
},
{
"cve": "CVE-2016-5192",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5192"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5192",
"url": "https://www.suse.com/security/cve/CVE-2016-5192"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5192",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5192"
},
{
"cve": "CVE-2016-5193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5193"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5193",
"url": "https://www.suse.com/security/cve/CVE-2016-5193"
},
{
"category": "external",
"summary": "SUSE Bug 1004465 for CVE-2016-5193",
"url": "https://bugzilla.suse.com/1004465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2016-5193"
},
{
"cve": "CVE-2016-5198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5198"
}
],
"notes": [
{
"category": "general",
"text": "V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5198",
"url": "https://www.suse.com/security/cve/CVE-2016-5198"
},
{
"category": "external",
"summary": "SUSE Bug 1008274 for CVE-2016-5198",
"url": "https://bugzilla.suse.com/1008274"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5198"
},
{
"cve": "CVE-2016-5199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5199"
}
],
"notes": [
{
"category": "general",
"text": "An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5199",
"url": "https://www.suse.com/security/cve/CVE-2016-5199"
},
{
"category": "external",
"summary": "SUSE Bug 1009892 for CVE-2016-5199",
"url": "https://bugzilla.suse.com/1009892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5199"
},
{
"cve": "CVE-2016-5200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5200"
}
],
"notes": [
{
"category": "general",
"text": "V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5200",
"url": "https://www.suse.com/security/cve/CVE-2016-5200"
},
{
"category": "external",
"summary": "SUSE Bug 1009893 for CVE-2016-5200",
"url": "https://bugzilla.suse.com/1009893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5200"
},
{
"cve": "CVE-2016-5201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5201"
}
],
"notes": [
{
"category": "general",
"text": "A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5201",
"url": "https://www.suse.com/security/cve/CVE-2016-5201"
},
{
"category": "external",
"summary": "SUSE Bug 1009894 for CVE-2016-5201",
"url": "https://bugzilla.suse.com/1009894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5201"
},
{
"cve": "CVE-2016-5202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5202"
}
],
"notes": [
{
"category": "general",
"text": "browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5202",
"url": "https://www.suse.com/security/cve/CVE-2016-5202"
},
{
"category": "external",
"summary": "SUSE Bug 1009895 for CVE-2016-5202",
"url": "https://bugzilla.suse.com/1009895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5202"
},
{
"cve": "CVE-2016-5204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5204"
}
],
"notes": [
{
"category": "general",
"text": "Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5204",
"url": "https://www.suse.com/security/cve/CVE-2016-5204"
},
{
"category": "external",
"summary": "SUSE Bug 1013236 for CVE-2016-5204",
"url": "https://bugzilla.suse.com/1013236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5204"
},
{
"cve": "CVE-2016-5211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5211"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5211",
"url": "https://www.suse.com/security/cve/CVE-2016-5211"
},
{
"category": "external",
"summary": "SUSE Bug 1013236 for CVE-2016-5211",
"url": "https://bugzilla.suse.com/1013236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-5211"
},
{
"cve": "CVE-2016-5217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5217"
}
],
"notes": [
{
"category": "general",
"text": "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5217",
"url": "https://www.suse.com/security/cve/CVE-2016-5217"
},
{
"category": "external",
"summary": "SUSE Bug 1013236 for CVE-2016-5217",
"url": "https://bugzilla.suse.com/1013236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5217"
},
{
"cve": "CVE-2016-5222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5222"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5222",
"url": "https://www.suse.com/security/cve/CVE-2016-5222"
},
{
"category": "external",
"summary": "SUSE Bug 1013236 for CVE-2016-5222",
"url": "https://bugzilla.suse.com/1013236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5222"
},
{
"cve": "CVE-2016-5224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5224"
}
],
"notes": [
{
"category": "general",
"text": "A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5224",
"url": "https://www.suse.com/security/cve/CVE-2016-5224"
},
{
"category": "external",
"summary": "SUSE Bug 1013236 for CVE-2016-5224",
"url": "https://bugzilla.suse.com/1013236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5224"
},
{
"cve": "CVE-2016-9651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9651"
}
],
"notes": [
{
"category": "general",
"text": "A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9651",
"url": "https://www.suse.com/security/cve/CVE-2016-9651"
},
{
"category": "external",
"summary": "SUSE Bug 1013236 for CVE-2016-9651",
"url": "https://bugzilla.suse.com/1013236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-9651"
},
{
"cve": "CVE-2017-11215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-11215"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-11215",
"url": "https://www.suse.com/security/cve/CVE-2017-11215"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2017-11215",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-11215"
},
{
"cve": "CVE-2017-11225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-11225"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-11225",
"url": "https://www.suse.com/security/cve/CVE-2017-11225"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2017-11225",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-11225"
},
{
"cve": "CVE-2017-15386",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15386"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15386",
"url": "https://www.suse.com/security/cve/CVE-2017-15386"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15386",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15386",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15386"
},
{
"cve": "CVE-2017-15387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15387"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15387",
"url": "https://www.suse.com/security/cve/CVE-2017-15387"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15387",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15387",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15387"
},
{
"cve": "CVE-2017-15388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15388"
}
],
"notes": [
{
"category": "general",
"text": "Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15388",
"url": "https://www.suse.com/security/cve/CVE-2017-15388"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15388",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15388",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15388"
},
{
"cve": "CVE-2017-15389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15389"
}
],
"notes": [
{
"category": "general",
"text": "An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15389",
"url": "https://www.suse.com/security/cve/CVE-2017-15389"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15389",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15389",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15389"
},
{
"cve": "CVE-2017-15390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15390"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15390",
"url": "https://www.suse.com/security/cve/CVE-2017-15390"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15390",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15390",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15390"
},
{
"cve": "CVE-2017-15391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15391"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15391",
"url": "https://www.suse.com/security/cve/CVE-2017-15391"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15391",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15391",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15391"
},
{
"cve": "CVE-2017-15392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15392"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Registry entry, related to PlatformIntegration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15392",
"url": "https://www.suse.com/security/cve/CVE-2017-15392"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15392",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15392",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15392"
},
{
"cve": "CVE-2017-15393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15393"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15393",
"url": "https://www.suse.com/security/cve/CVE-2017-15393"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15393",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15393",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15393"
},
{
"cve": "CVE-2017-15394",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15394"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15394",
"url": "https://www.suse.com/security/cve/CVE-2017-15394"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15394",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15394",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15394"
},
{
"cve": "CVE-2017-15395",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15395"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15395",
"url": "https://www.suse.com/security/cve/CVE-2017-15395"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15395",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15395",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15395"
},
{
"cve": "CVE-2017-15396",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15396"
}
],
"notes": [
{
"category": "general",
"text": "A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15396",
"url": "https://www.suse.com/security/cve/CVE-2017-15396"
},
{
"category": "external",
"summary": "SUSE Bug 1065405 for CVE-2017-15396",
"url": "https://bugzilla.suse.com/1065405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15396"
},
{
"cve": "CVE-2017-15398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15398"
}
],
"notes": [
{
"category": "general",
"text": "A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15398",
"url": "https://www.suse.com/security/cve/CVE-2017-15398"
},
{
"category": "external",
"summary": "SUSE Bug 1066851 for CVE-2017-15398",
"url": "https://bugzilla.suse.com/1066851"
},
{
"category": "external",
"summary": "SUSE Bug 1066853 for CVE-2017-15398",
"url": "https://bugzilla.suse.com/1066853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-15398"
},
{
"cve": "CVE-2017-15399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15399"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15399",
"url": "https://www.suse.com/security/cve/CVE-2017-15399"
},
{
"category": "external",
"summary": "SUSE Bug 1066851 for CVE-2017-15399",
"url": "https://bugzilla.suse.com/1066851"
},
{
"category": "external",
"summary": "SUSE Bug 1066853 for CVE-2017-15399",
"url": "https://bugzilla.suse.com/1066853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-15399"
},
{
"cve": "CVE-2017-15407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15407"
}
],
"notes": [
{
"category": "general",
"text": "Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15407",
"url": "https://www.suse.com/security/cve/CVE-2017-15407"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15407",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15407"
},
{
"cve": "CVE-2017-15408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15408"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15408",
"url": "https://www.suse.com/security/cve/CVE-2017-15408"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15408",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15408"
},
{
"cve": "CVE-2017-15409",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15409"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15409",
"url": "https://www.suse.com/security/cve/CVE-2017-15409"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15409",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15409"
},
{
"cve": "CVE-2017-15410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15410"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15410",
"url": "https://www.suse.com/security/cve/CVE-2017-15410"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15410",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15410"
},
{
"cve": "CVE-2017-15411",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15411"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15411",
"url": "https://www.suse.com/security/cve/CVE-2017-15411"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15411",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15411"
},
{
"cve": "CVE-2017-15412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15412"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15412",
"url": "https://www.suse.com/security/cve/CVE-2017-15412"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077993 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1077993"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15412"
},
{
"cve": "CVE-2017-15413",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15413"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15413",
"url": "https://www.suse.com/security/cve/CVE-2017-15413"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15413",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15413"
},
{
"cve": "CVE-2017-15415",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15415"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15415",
"url": "https://www.suse.com/security/cve/CVE-2017-15415"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15415",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15415"
},
{
"cve": "CVE-2017-15416",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15416"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15416",
"url": "https://www.suse.com/security/cve/CVE-2017-15416"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15416",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15416"
},
{
"cve": "CVE-2017-15417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15417"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15417",
"url": "https://www.suse.com/security/cve/CVE-2017-15417"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15417",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15417"
},
{
"cve": "CVE-2017-15418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15418"
}
],
"notes": [
{
"category": "general",
"text": "Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15418",
"url": "https://www.suse.com/security/cve/CVE-2017-15418"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15418",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15418"
},
{
"cve": "CVE-2017-15419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15419"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15419",
"url": "https://www.suse.com/security/cve/CVE-2017-15419"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15419",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15419"
},
{
"cve": "CVE-2017-15420",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15420"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15420",
"url": "https://www.suse.com/security/cve/CVE-2017-15420"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15420",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2017-15420",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15420"
},
{
"cve": "CVE-2017-15422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15422"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15422",
"url": "https://www.suse.com/security/cve/CVE-2017-15422"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15422",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077999 for CVE-2017-15422",
"url": "https://bugzilla.suse.com/1077999"
},
{
"category": "external",
"summary": "SUSE Bug 1123121 for CVE-2017-15422",
"url": "https://bugzilla.suse.com/1123121"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-15422"
},
{
"cve": "CVE-2017-15423",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15423"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15423",
"url": "https://www.suse.com/security/cve/CVE-2017-15423"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15423",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15423"
},
{
"cve": "CVE-2017-15424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15424"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15424",
"url": "https://www.suse.com/security/cve/CVE-2017-15424"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15424",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15424"
},
{
"cve": "CVE-2017-15425",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15425"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15425",
"url": "https://www.suse.com/security/cve/CVE-2017-15425"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15425",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15425"
},
{
"cve": "CVE-2017-15426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15426"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15426",
"url": "https://www.suse.com/security/cve/CVE-2017-15426"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15426",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15426"
},
{
"cve": "CVE-2017-15427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15427"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15427",
"url": "https://www.suse.com/security/cve/CVE-2017-15427"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15427",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15427"
},
{
"cve": "CVE-2017-15429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15429"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15429",
"url": "https://www.suse.com/security/cve/CVE-2017-15429"
},
{
"category": "external",
"summary": "SUSE Bug 1072976 for CVE-2017-15429",
"url": "https://bugzilla.suse.com/1072976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15429"
},
{
"cve": "CVE-2017-15430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15430"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15430",
"url": "https://www.suse.com/security/cve/CVE-2017-15430"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15430",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1106341 for CVE-2017-15430",
"url": "https://bugzilla.suse.com/1106341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-15430"
},
{
"cve": "CVE-2017-5006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5006"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5006",
"url": "https://www.suse.com/security/cve/CVE-2017-5006"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5006",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5006"
},
{
"cve": "CVE-2017-5007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5007"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5007",
"url": "https://www.suse.com/security/cve/CVE-2017-5007"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5007",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5007"
},
{
"cve": "CVE-2017-5008",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5008"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5008",
"url": "https://www.suse.com/security/cve/CVE-2017-5008"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5008",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5008"
},
{
"cve": "CVE-2017-5009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5009"
}
],
"notes": [
{
"category": "general",
"text": "WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5009",
"url": "https://www.suse.com/security/cve/CVE-2017-5009"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5009",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5009"
},
{
"cve": "CVE-2017-5010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5010"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5010",
"url": "https://www.suse.com/security/cve/CVE-2017-5010"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5010",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5010"
},
{
"cve": "CVE-2017-5011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5011"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5011",
"url": "https://www.suse.com/security/cve/CVE-2017-5011"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5011",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5011"
},
{
"cve": "CVE-2017-5012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5012"
}
],
"notes": [
{
"category": "general",
"text": "A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5012",
"url": "https://www.suse.com/security/cve/CVE-2017-5012"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5012",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5012"
},
{
"cve": "CVE-2017-5013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5013"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5013",
"url": "https://www.suse.com/security/cve/CVE-2017-5013"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5013",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5013"
},
{
"cve": "CVE-2017-5014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5014"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5014",
"url": "https://www.suse.com/security/cve/CVE-2017-5014"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5014",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5014"
},
{
"cve": "CVE-2017-5015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5015"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5015",
"url": "https://www.suse.com/security/cve/CVE-2017-5015"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5015",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5015"
},
{
"cve": "CVE-2017-5016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5016"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don\u0027t control via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5016",
"url": "https://www.suse.com/security/cve/CVE-2017-5016"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5016",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5016"
},
{
"cve": "CVE-2017-5017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5017"
}
],
"notes": [
{
"category": "general",
"text": "Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5017",
"url": "https://www.suse.com/security/cve/CVE-2017-5017"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5017",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5017"
},
{
"cve": "CVE-2017-5018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5018"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5018",
"url": "https://www.suse.com/security/cve/CVE-2017-5018"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5018",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5018"
},
{
"cve": "CVE-2017-5019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5019"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5019",
"url": "https://www.suse.com/security/cve/CVE-2017-5019"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5019",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5019"
},
{
"cve": "CVE-2017-5020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5020"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5020",
"url": "https://www.suse.com/security/cve/CVE-2017-5020"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5020",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5020"
},
{
"cve": "CVE-2017-5021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5021"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5021",
"url": "https://www.suse.com/security/cve/CVE-2017-5021"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5021",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5021"
},
{
"cve": "CVE-2017-5022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5022"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5022",
"url": "https://www.suse.com/security/cve/CVE-2017-5022"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5022",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5022"
},
{
"cve": "CVE-2017-5023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5023"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5023",
"url": "https://www.suse.com/security/cve/CVE-2017-5023"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5023",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5023"
},
{
"cve": "CVE-2017-5024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5024"
}
],
"notes": [
{
"category": "general",
"text": "FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5024",
"url": "https://www.suse.com/security/cve/CVE-2017-5024"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5024",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5024"
},
{
"cve": "CVE-2017-5025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5025"
}
],
"notes": [
{
"category": "general",
"text": "FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5025",
"url": "https://www.suse.com/security/cve/CVE-2017-5025"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5025",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5025"
},
{
"cve": "CVE-2017-5026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5026"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don\u0027t control via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5026",
"url": "https://www.suse.com/security/cve/CVE-2017-5026"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5026",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5026"
},
{
"cve": "CVE-2017-5030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5030"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5030",
"url": "https://www.suse.com/security/cve/CVE-2017-5030"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5030",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5030",
"url": "https://bugzilla.suse.com/1028875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5030"
},
{
"cve": "CVE-2017-5035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5035"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5035",
"url": "https://www.suse.com/security/cve/CVE-2017-5035"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5035",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5035",
"url": "https://bugzilla.suse.com/1028875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5035"
},
{
"cve": "CVE-2017-5041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5041"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5041",
"url": "https://www.suse.com/security/cve/CVE-2017-5041"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5041",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5041",
"url": "https://bugzilla.suse.com/1028875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5041"
},
{
"cve": "CVE-2017-5044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5044"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5044",
"url": "https://www.suse.com/security/cve/CVE-2017-5044"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5044",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5044",
"url": "https://bugzilla.suse.com/1028875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5044"
},
{
"cve": "CVE-2017-5052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5052"
}
],
"notes": [
{
"category": "general",
"text": "An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5052",
"url": "https://www.suse.com/security/cve/CVE-2017-5052"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5052",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5052"
},
{
"cve": "CVE-2017-5053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5053"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5053",
"url": "https://www.suse.com/security/cve/CVE-2017-5053"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5053",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5053"
},
{
"cve": "CVE-2017-5054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5054"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5054",
"url": "https://www.suse.com/security/cve/CVE-2017-5054"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5054",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5054"
},
{
"cve": "CVE-2017-5055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5055"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5055",
"url": "https://www.suse.com/security/cve/CVE-2017-5055"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5055",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5055"
},
{
"cve": "CVE-2017-5056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5056"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5056",
"url": "https://www.suse.com/security/cve/CVE-2017-5056"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5056",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5056"
},
{
"cve": "CVE-2017-5057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5057"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5057",
"url": "https://www.suse.com/security/cve/CVE-2017-5057"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5057",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5057"
},
{
"cve": "CVE-2017-5058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5058"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5058",
"url": "https://www.suse.com/security/cve/CVE-2017-5058"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5058",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5058"
},
{
"cve": "CVE-2017-5059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5059"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5059",
"url": "https://www.suse.com/security/cve/CVE-2017-5059"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5059",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5059"
},
{
"cve": "CVE-2017-5060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5060"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5060",
"url": "https://www.suse.com/security/cve/CVE-2017-5060"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5060",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5060"
},
{
"cve": "CVE-2017-5061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5061"
}
],
"notes": [
{
"category": "general",
"text": "A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5061",
"url": "https://www.suse.com/security/cve/CVE-2017-5061"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5061",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5061"
},
{
"cve": "CVE-2017-5062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5062"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5062",
"url": "https://www.suse.com/security/cve/CVE-2017-5062"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5062",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5062"
},
{
"cve": "CVE-2017-5063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5063"
}
],
"notes": [
{
"category": "general",
"text": "A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5063",
"url": "https://www.suse.com/security/cve/CVE-2017-5063"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5063",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5063"
},
{
"cve": "CVE-2017-5064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5064"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5064",
"url": "https://www.suse.com/security/cve/CVE-2017-5064"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5064",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5064"
},
{
"cve": "CVE-2017-5065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5065"
}
],
"notes": [
{
"category": "general",
"text": "Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially confuse a user into making an incorrect security decision via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5065",
"url": "https://www.suse.com/security/cve/CVE-2017-5065"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5065",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5065"
},
{
"cve": "CVE-2017-5066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5066"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5066",
"url": "https://www.suse.com/security/cve/CVE-2017-5066"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5066",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5066"
},
{
"cve": "CVE-2017-5067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5067"
}
],
"notes": [
{
"category": "general",
"text": "An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5067",
"url": "https://www.suse.com/security/cve/CVE-2017-5067"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5067",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5067"
},
{
"cve": "CVE-2017-5068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5068"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5068",
"url": "https://www.suse.com/security/cve/CVE-2017-5068"
},
{
"category": "external",
"summary": "SUSE Bug 1037594 for CVE-2017-5068",
"url": "https://bugzilla.suse.com/1037594"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5068"
},
{
"cve": "CVE-2017-5069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5069"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5069",
"url": "https://www.suse.com/security/cve/CVE-2017-5069"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5069",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5069"
},
{
"cve": "CVE-2017-5070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5070"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5070",
"url": "https://www.suse.com/security/cve/CVE-2017-5070"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5070",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5070"
},
{
"cve": "CVE-2017-5071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5071"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5071",
"url": "https://www.suse.com/security/cve/CVE-2017-5071"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5071",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5071"
},
{
"cve": "CVE-2017-5072",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5072"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5072",
"url": "https://www.suse.com/security/cve/CVE-2017-5072"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5072",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5072"
},
{
"cve": "CVE-2017-5073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5073"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5073",
"url": "https://www.suse.com/security/cve/CVE-2017-5073"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5073",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5073"
},
{
"cve": "CVE-2017-5074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5074"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5074",
"url": "https://www.suse.com/security/cve/CVE-2017-5074"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5074",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5074"
},
{
"cve": "CVE-2017-5075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5075"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5075",
"url": "https://www.suse.com/security/cve/CVE-2017-5075"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5075",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5075"
},
{
"cve": "CVE-2017-5076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5076"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5076",
"url": "https://www.suse.com/security/cve/CVE-2017-5076"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5076",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5076"
},
{
"cve": "CVE-2017-5077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5077"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5077",
"url": "https://www.suse.com/security/cve/CVE-2017-5077"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5077",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5077"
},
{
"cve": "CVE-2017-5078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5078"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Blink\u0027s mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5078",
"url": "https://www.suse.com/security/cve/CVE-2017-5078"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5078",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5078"
},
{
"cve": "CVE-2017-5079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5079"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5079",
"url": "https://www.suse.com/security/cve/CVE-2017-5079"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5079",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5079"
},
{
"cve": "CVE-2017-5080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5080"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5080",
"url": "https://www.suse.com/security/cve/CVE-2017-5080"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5080",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5080"
},
{
"cve": "CVE-2017-5081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5081"
}
],
"notes": [
{
"category": "general",
"text": "Lack of verification of an extension\u0027s locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5081",
"url": "https://www.suse.com/security/cve/CVE-2017-5081"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5081",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5081"
},
{
"cve": "CVE-2017-5082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5082"
}
],
"notes": [
{
"category": "general",
"text": "Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5082",
"url": "https://www.suse.com/security/cve/CVE-2017-5082"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5082",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5082"
},
{
"cve": "CVE-2017-5083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5083"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5083",
"url": "https://www.suse.com/security/cve/CVE-2017-5083"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5083",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5083"
},
{
"cve": "CVE-2017-5085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5085"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5085",
"url": "https://www.suse.com/security/cve/CVE-2017-5085"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5085",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5085"
},
{
"cve": "CVE-2017-5086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5086"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5086",
"url": "https://www.suse.com/security/cve/CVE-2017-5086"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5086",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5086"
},
{
"cve": "CVE-2017-5087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5087"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5087",
"url": "https://www.suse.com/security/cve/CVE-2017-5087"
},
{
"category": "external",
"summary": "SUSE Bug 1044690 for CVE-2017-5087",
"url": "https://bugzilla.suse.com/1044690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5087"
},
{
"cve": "CVE-2017-5088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5088"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5088",
"url": "https://www.suse.com/security/cve/CVE-2017-5088"
},
{
"category": "external",
"summary": "SUSE Bug 1044690 for CVE-2017-5088",
"url": "https://bugzilla.suse.com/1044690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5088"
},
{
"cve": "CVE-2017-5089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5089"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5089",
"url": "https://www.suse.com/security/cve/CVE-2017-5089"
},
{
"category": "external",
"summary": "SUSE Bug 1044690 for CVE-2017-5089",
"url": "https://bugzilla.suse.com/1044690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5089"
},
{
"cve": "CVE-2017-5091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5091"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5091",
"url": "https://www.suse.com/security/cve/CVE-2017-5091"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5091",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5091"
},
{
"cve": "CVE-2017-5092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5092"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5092",
"url": "https://www.suse.com/security/cve/CVE-2017-5092"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5092",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5092"
},
{
"cve": "CVE-2017-5093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5093"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5093",
"url": "https://www.suse.com/security/cve/CVE-2017-5093"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5093",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5093"
},
{
"cve": "CVE-2017-5094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5094"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5094",
"url": "https://www.suse.com/security/cve/CVE-2017-5094"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5094",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5094"
},
{
"cve": "CVE-2017-5095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5095"
}
],
"notes": [
{
"category": "general",
"text": "Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5095",
"url": "https://www.suse.com/security/cve/CVE-2017-5095"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5095",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5095"
},
{
"cve": "CVE-2017-5096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5096"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5096",
"url": "https://www.suse.com/security/cve/CVE-2017-5096"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5096",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5096"
},
{
"cve": "CVE-2017-5097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5097"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5097",
"url": "https://www.suse.com/security/cve/CVE-2017-5097"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5097",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5097"
},
{
"cve": "CVE-2017-5098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5098"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5098",
"url": "https://www.suse.com/security/cve/CVE-2017-5098"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5098",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5098"
},
{
"cve": "CVE-2017-5099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5099"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5099",
"url": "https://www.suse.com/security/cve/CVE-2017-5099"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5099",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5099"
},
{
"cve": "CVE-2017-5100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5100"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5100",
"url": "https://www.suse.com/security/cve/CVE-2017-5100"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5100",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5100"
},
{
"cve": "CVE-2017-5101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5101"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5101",
"url": "https://www.suse.com/security/cve/CVE-2017-5101"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5101",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5101"
},
{
"cve": "CVE-2017-5102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5102"
}
],
"notes": [
{
"category": "general",
"text": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5102",
"url": "https://www.suse.com/security/cve/CVE-2017-5102"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5102",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5102"
},
{
"cve": "CVE-2017-5103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5103"
}
],
"notes": [
{
"category": "general",
"text": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5103",
"url": "https://www.suse.com/security/cve/CVE-2017-5103"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5103",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5103"
},
{
"cve": "CVE-2017-5104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5104"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5104",
"url": "https://www.suse.com/security/cve/CVE-2017-5104"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5104",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5104"
},
{
"cve": "CVE-2017-5105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5105"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5105",
"url": "https://www.suse.com/security/cve/CVE-2017-5105"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5105",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5105"
},
{
"cve": "CVE-2017-5106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5106"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5106",
"url": "https://www.suse.com/security/cve/CVE-2017-5106"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5106",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5106"
},
{
"cve": "CVE-2017-5107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5107"
}
],
"notes": [
{
"category": "general",
"text": "A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe\u0027d via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5107",
"url": "https://www.suse.com/security/cve/CVE-2017-5107"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5107",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5107"
},
{
"cve": "CVE-2017-5108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5108"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5108",
"url": "https://www.suse.com/security/cve/CVE-2017-5108"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5108",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5108"
},
{
"cve": "CVE-2017-5109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5109"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5109",
"url": "https://www.suse.com/security/cve/CVE-2017-5109"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5109",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5109"
},
{
"cve": "CVE-2017-5110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5110"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5110",
"url": "https://www.suse.com/security/cve/CVE-2017-5110"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5110",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5110"
},
{
"cve": "CVE-2017-5111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5111"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5111",
"url": "https://www.suse.com/security/cve/CVE-2017-5111"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5111",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5111"
},
{
"cve": "CVE-2017-5112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5112"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5112",
"url": "https://www.suse.com/security/cve/CVE-2017-5112"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5112",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5112"
},
{
"cve": "CVE-2017-5113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5113"
}
],
"notes": [
{
"category": "general",
"text": "Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5113",
"url": "https://www.suse.com/security/cve/CVE-2017-5113"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5113",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5113"
},
{
"cve": "CVE-2017-5114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5114"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5114",
"url": "https://www.suse.com/security/cve/CVE-2017-5114"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5114",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5114"
},
{
"cve": "CVE-2017-5115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5115"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5115",
"url": "https://www.suse.com/security/cve/CVE-2017-5115"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5115",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5115"
},
{
"cve": "CVE-2017-5116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5116"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5116",
"url": "https://www.suse.com/security/cve/CVE-2017-5116"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5116",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5116"
},
{
"cve": "CVE-2017-5117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5117"
}
],
"notes": [
{
"category": "general",
"text": "Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5117",
"url": "https://www.suse.com/security/cve/CVE-2017-5117"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5117",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5117"
},
{
"cve": "CVE-2017-5118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5118"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5118",
"url": "https://www.suse.com/security/cve/CVE-2017-5118"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5118",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5118"
},
{
"cve": "CVE-2017-5119",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5119"
}
],
"notes": [
{
"category": "general",
"text": "Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5119",
"url": "https://www.suse.com/security/cve/CVE-2017-5119"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5119",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5119"
},
{
"cve": "CVE-2017-5120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5120"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial \"www.\" substring).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5120",
"url": "https://www.suse.com/security/cve/CVE-2017-5120"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5120",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5120"
},
{
"cve": "CVE-2017-5121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5121"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5121",
"url": "https://www.suse.com/security/cve/CVE-2017-5121"
},
{
"category": "external",
"summary": "SUSE Bug 1060019 for CVE-2017-5121",
"url": "https://bugzilla.suse.com/1060019"
},
{
"category": "external",
"summary": "SUSE Bug 1060020 for CVE-2017-5121",
"url": "https://bugzilla.suse.com/1060020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5121"
},
{
"cve": "CVE-2017-5122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5122"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5122",
"url": "https://www.suse.com/security/cve/CVE-2017-5122"
},
{
"category": "external",
"summary": "SUSE Bug 1060019 for CVE-2017-5122",
"url": "https://bugzilla.suse.com/1060019"
},
{
"category": "external",
"summary": "SUSE Bug 1060020 for CVE-2017-5122",
"url": "https://bugzilla.suse.com/1060020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5122"
},
{
"cve": "CVE-2017-5124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5124"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5124",
"url": "https://www.suse.com/security/cve/CVE-2017-5124"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5124",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5124",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5124"
},
{
"cve": "CVE-2017-5125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5125"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5125",
"url": "https://www.suse.com/security/cve/CVE-2017-5125"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5125",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5125",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5125"
},
{
"cve": "CVE-2017-5126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5126"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5126",
"url": "https://www.suse.com/security/cve/CVE-2017-5126"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5126",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5126",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5126"
},
{
"cve": "CVE-2017-5127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5127"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5127",
"url": "https://www.suse.com/security/cve/CVE-2017-5127"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5127",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5127",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5127"
},
{
"cve": "CVE-2017-5128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5128"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5128",
"url": "https://www.suse.com/security/cve/CVE-2017-5128"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5128",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5128",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5128"
},
{
"cve": "CVE-2017-5129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5129"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5129",
"url": "https://www.suse.com/security/cve/CVE-2017-5129"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5129",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5129",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5129"
},
{
"cve": "CVE-2017-5130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5130"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5130",
"url": "https://www.suse.com/security/cve/CVE-2017-5130"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1064089"
},
{
"category": "external",
"summary": "SUSE Bug 1078806 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1078806"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5130"
},
{
"cve": "CVE-2017-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5131"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5131",
"url": "https://www.suse.com/security/cve/CVE-2017-5131"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5131",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5131",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5131"
},
{
"cve": "CVE-2017-5132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5132"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5132",
"url": "https://www.suse.com/security/cve/CVE-2017-5132"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5132",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5132",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5132"
},
{
"cve": "CVE-2017-5133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5133"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5133",
"url": "https://www.suse.com/security/cve/CVE-2017-5133"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5133",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5133",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5133"
},
{
"cve": "CVE-2017-7000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7000"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7000",
"url": "https://www.suse.com/security/cve/CVE-2017-7000"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-7000",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7000"
},
{
"cve": "CVE-2018-16065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16065"
}
],
"notes": [
{
"category": "general",
"text": "A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16065",
"url": "https://www.suse.com/security/cve/CVE-2018-16065"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16065",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16065",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16065",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16065"
},
{
"cve": "CVE-2018-16066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16066"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16066",
"url": "https://www.suse.com/security/cve/CVE-2018-16066"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16066",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16066",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16066",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16066"
},
{
"cve": "CVE-2018-16067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16067"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16067",
"url": "https://www.suse.com/security/cve/CVE-2018-16067"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16067",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16067",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16067",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16067"
},
{
"cve": "CVE-2018-16068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16068"
}
],
"notes": [
{
"category": "general",
"text": "Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16068",
"url": "https://www.suse.com/security/cve/CVE-2018-16068"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16068",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16068",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16068",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16068"
},
{
"cve": "CVE-2018-16069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16069"
}
],
"notes": [
{
"category": "general",
"text": "Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16069",
"url": "https://www.suse.com/security/cve/CVE-2018-16069"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16069",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16069",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16069",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16069"
},
{
"cve": "CVE-2018-16070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16070"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16070",
"url": "https://www.suse.com/security/cve/CVE-2018-16070"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16070",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16070",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16070",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16070"
},
{
"cve": "CVE-2018-16071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16071"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16071",
"url": "https://www.suse.com/security/cve/CVE-2018-16071"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16071",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16071",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16071",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16071"
},
{
"cve": "CVE-2018-16073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16073"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16073",
"url": "https://www.suse.com/security/cve/CVE-2018-16073"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16073",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16073",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16073",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16073"
},
{
"cve": "CVE-2018-16074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16074"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16074",
"url": "https://www.suse.com/security/cve/CVE-2018-16074"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16074",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16074",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16074",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16074"
},
{
"cve": "CVE-2018-16075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16075"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16075",
"url": "https://www.suse.com/security/cve/CVE-2018-16075"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16075",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16075",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16075",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16075"
},
{
"cve": "CVE-2018-16076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16076"
}
],
"notes": [
{
"category": "general",
"text": "Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16076",
"url": "https://www.suse.com/security/cve/CVE-2018-16076"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16076",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16076",
"url": "https://bugzilla.suse.com/1107235"
},
{
"category": "external",
"summary": "SUSE Bug 1110628 for CVE-2018-16076",
"url": "https://bugzilla.suse.com/1110628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16076"
},
{
"cve": "CVE-2018-16077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16077"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16077",
"url": "https://www.suse.com/security/cve/CVE-2018-16077"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16077",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16077",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16077",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16077"
},
{
"cve": "CVE-2018-16078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16078"
}
],
"notes": [
{
"category": "general",
"text": "Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16078",
"url": "https://www.suse.com/security/cve/CVE-2018-16078"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16078",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16078",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16078",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16078"
},
{
"cve": "CVE-2018-16079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16079"
}
],
"notes": [
{
"category": "general",
"text": "A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16079",
"url": "https://www.suse.com/security/cve/CVE-2018-16079"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16079",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16079",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16079",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16079"
},
{
"cve": "CVE-2018-16080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16080"
}
],
"notes": [
{
"category": "general",
"text": "A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16080",
"url": "https://www.suse.com/security/cve/CVE-2018-16080"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16080",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16080",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16080",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16080"
},
{
"cve": "CVE-2018-16081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16081"
}
],
"notes": [
{
"category": "general",
"text": "Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16081",
"url": "https://www.suse.com/security/cve/CVE-2018-16081"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16081",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16081",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16081",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16081"
},
{
"cve": "CVE-2018-16082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16082"
}
],
"notes": [
{
"category": "general",
"text": "An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16082",
"url": "https://www.suse.com/security/cve/CVE-2018-16082"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16082",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16082",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16082",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16082"
},
{
"cve": "CVE-2018-16083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16083"
}
],
"notes": [
{
"category": "general",
"text": "An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16083",
"url": "https://www.suse.com/security/cve/CVE-2018-16083"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16083",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16083",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16083",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16083"
},
{
"cve": "CVE-2018-16084",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16084"
}
],
"notes": [
{
"category": "general",
"text": "The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perform certain operations to open external programs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16084",
"url": "https://www.suse.com/security/cve/CVE-2018-16084"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16084",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16084",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16084",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16084"
},
{
"cve": "CVE-2018-16085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16085"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16085",
"url": "https://www.suse.com/security/cve/CVE-2018-16085"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16085",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16085",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16085",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16085"
},
{
"cve": "CVE-2018-16086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16086"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16086",
"url": "https://www.suse.com/security/cve/CVE-2018-16086"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16086",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16086",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16086",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16086"
},
{
"cve": "CVE-2018-16087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16087"
}
],
"notes": [
{
"category": "general",
"text": "Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16087",
"url": "https://www.suse.com/security/cve/CVE-2018-16087"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16087",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16087",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16087",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16087"
},
{
"cve": "CVE-2018-16088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16088"
}
],
"notes": [
{
"category": "general",
"text": "A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16088",
"url": "https://www.suse.com/security/cve/CVE-2018-16088"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16088",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16088",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16088",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16088"
},
{
"cve": "CVE-2018-17462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17462"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17462",
"url": "https://www.suse.com/security/cve/CVE-2018-17462"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17462",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17462",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17462"
},
{
"cve": "CVE-2018-17463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17463"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17463",
"url": "https://www.suse.com/security/cve/CVE-2018-17463"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17463",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17463",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17463"
},
{
"cve": "CVE-2018-17464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17464"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17464",
"url": "https://www.suse.com/security/cve/CVE-2018-17464"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17464",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17464",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17464"
},
{
"cve": "CVE-2018-17465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17465"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17465",
"url": "https://www.suse.com/security/cve/CVE-2018-17465"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17465",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17465",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17465"
},
{
"cve": "CVE-2018-17466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17466"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17466",
"url": "https://www.suse.com/security/cve/CVE-2018-17466"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17466"
},
{
"cve": "CVE-2018-17467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17467"
}
],
"notes": [
{
"category": "general",
"text": "Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17467",
"url": "https://www.suse.com/security/cve/CVE-2018-17467"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17467",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17467",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17467"
},
{
"cve": "CVE-2018-17468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17468"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17468",
"url": "https://www.suse.com/security/cve/CVE-2018-17468"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17468",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17468",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17468"
},
{
"cve": "CVE-2018-17469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17469"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17469",
"url": "https://www.suse.com/security/cve/CVE-2018-17469"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17469",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17469",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17469"
},
{
"cve": "CVE-2018-17470",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17470"
}
],
"notes": [
{
"category": "general",
"text": "A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17470",
"url": "https://www.suse.com/security/cve/CVE-2018-17470"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17470",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17470",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17470"
},
{
"cve": "CVE-2018-17471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17471"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17471",
"url": "https://www.suse.com/security/cve/CVE-2018-17471"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17471",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17471",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17471"
},
{
"cve": "CVE-2018-17472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17472"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the \u003ciframe\u003e sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17472",
"url": "https://www.suse.com/security/cve/CVE-2018-17472"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17472",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17472",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17472"
},
{
"cve": "CVE-2018-17473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17473"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17473",
"url": "https://www.suse.com/security/cve/CVE-2018-17473"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17473",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17473",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17473"
},
{
"cve": "CVE-2018-17474",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17474"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17474",
"url": "https://www.suse.com/security/cve/CVE-2018-17474"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17474",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17474",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17474"
},
{
"cve": "CVE-2018-17475",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17475"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17475",
"url": "https://www.suse.com/security/cve/CVE-2018-17475"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17475",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17475",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17475"
},
{
"cve": "CVE-2018-17476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17476"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17476",
"url": "https://www.suse.com/security/cve/CVE-2018-17476"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17476",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17476",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17476"
},
{
"cve": "CVE-2018-17477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17477"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17477",
"url": "https://www.suse.com/security/cve/CVE-2018-17477"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17477",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17477",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17477"
},
{
"cve": "CVE-2018-17478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17478"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17478",
"url": "https://www.suse.com/security/cve/CVE-2018-17478"
},
{
"category": "external",
"summary": "SUSE Bug 1115537 for CVE-2018-17478",
"url": "https://bugzilla.suse.com/1115537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-17478"
},
{
"cve": "CVE-2018-17479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17479"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17479",
"url": "https://www.suse.com/security/cve/CVE-2018-17479"
},
{
"category": "external",
"summary": "SUSE Bug 1116608 for CVE-2018-17479",
"url": "https://bugzilla.suse.com/1116608"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-17479"
},
{
"cve": "CVE-2018-17480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17480"
}
],
"notes": [
{
"category": "general",
"text": "Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17480",
"url": "https://www.suse.com/security/cve/CVE-2018-17480"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-17480",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-17480",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-17480"
},
{
"cve": "CVE-2018-17481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17481"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17481",
"url": "https://www.suse.com/security/cve/CVE-2018-17481"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-17481",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1119364 for CVE-2018-17481",
"url": "https://bugzilla.suse.com/1119364"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-17481",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-17481"
},
{
"cve": "CVE-2018-18335",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18335"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18335",
"url": "https://www.suse.com/security/cve/CVE-2018-18335"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18335",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18335",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18335"
},
{
"cve": "CVE-2018-18336",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18336"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18336",
"url": "https://www.suse.com/security/cve/CVE-2018-18336"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18336",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18336",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18336"
},
{
"cve": "CVE-2018-18337",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18337"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18337",
"url": "https://www.suse.com/security/cve/CVE-2018-18337"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18337",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18337",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18337"
},
{
"cve": "CVE-2018-18338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18338"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18338",
"url": "https://www.suse.com/security/cve/CVE-2018-18338"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18338",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18338",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18338"
},
{
"cve": "CVE-2018-18339",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18339"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18339",
"url": "https://www.suse.com/security/cve/CVE-2018-18339"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18339",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18339",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18339"
},
{
"cve": "CVE-2018-18340",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18340"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18340",
"url": "https://www.suse.com/security/cve/CVE-2018-18340"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18340",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18340",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18340"
},
{
"cve": "CVE-2018-18341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18341"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18341",
"url": "https://www.suse.com/security/cve/CVE-2018-18341"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18341",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18341",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18341"
},
{
"cve": "CVE-2018-18342",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18342"
}
],
"notes": [
{
"category": "general",
"text": "Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18342",
"url": "https://www.suse.com/security/cve/CVE-2018-18342"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18342",
"url": "https://bugzilla.suse.com/1118529"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18342"
},
{
"cve": "CVE-2018-18343",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18343"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18343",
"url": "https://www.suse.com/security/cve/CVE-2018-18343"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18343",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18343",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18343"
},
{
"cve": "CVE-2018-18344",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18344"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18344",
"url": "https://www.suse.com/security/cve/CVE-2018-18344"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18344",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18344",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18344"
},
{
"cve": "CVE-2018-18345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18345"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18345",
"url": "https://www.suse.com/security/cve/CVE-2018-18345"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18345",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18345",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18345"
},
{
"cve": "CVE-2018-18346",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18346"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18346",
"url": "https://www.suse.com/security/cve/CVE-2018-18346"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18346",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18346",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18346"
},
{
"cve": "CVE-2018-18347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18347"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18347",
"url": "https://www.suse.com/security/cve/CVE-2018-18347"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18347",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18347",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18347"
},
{
"cve": "CVE-2018-18348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18348"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18348",
"url": "https://www.suse.com/security/cve/CVE-2018-18348"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18348",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18348",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18348"
},
{
"cve": "CVE-2018-18349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18349"
}
],
"notes": [
{
"category": "general",
"text": "Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18349",
"url": "https://www.suse.com/security/cve/CVE-2018-18349"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18349",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18349",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18349"
},
{
"cve": "CVE-2018-18350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18350"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18350",
"url": "https://www.suse.com/security/cve/CVE-2018-18350"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18350",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18350",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18350"
},
{
"cve": "CVE-2018-18351",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18351"
}
],
"notes": [
{
"category": "general",
"text": "Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass SameSite cookie policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18351",
"url": "https://www.suse.com/security/cve/CVE-2018-18351"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18351",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18351",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18351"
},
{
"cve": "CVE-2018-18352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18352"
}
],
"notes": [
{
"category": "general",
"text": "Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18352",
"url": "https://www.suse.com/security/cve/CVE-2018-18352"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18352",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18352",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18352"
},
{
"cve": "CVE-2018-18353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18353"
}
],
"notes": [
{
"category": "general",
"text": "Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of an auto dialog via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18353",
"url": "https://www.suse.com/security/cve/CVE-2018-18353"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18353",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18353",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18353"
},
{
"cve": "CVE-2018-18354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18354"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80 allowed a remote attacker to launch external programs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18354",
"url": "https://www.suse.com/security/cve/CVE-2018-18354"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18354",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18354",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18354"
},
{
"cve": "CVE-2018-18355",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18355"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18355",
"url": "https://www.suse.com/security/cve/CVE-2018-18355"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18355",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18355",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18355"
},
{
"cve": "CVE-2018-18356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18356"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18356",
"url": "https://www.suse.com/security/cve/CVE-2018-18356"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1125396"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18356"
},
{
"cve": "CVE-2018-18357",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18357"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18357",
"url": "https://www.suse.com/security/cve/CVE-2018-18357"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18357",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18357",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18357"
},
{
"cve": "CVE-2018-18358",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18358"
}
],
"notes": [
{
"category": "general",
"text": "Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to proxy resources on localhost via a crafted WPAD file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18358",
"url": "https://www.suse.com/security/cve/CVE-2018-18358"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18358",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18358",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18358"
},
{
"cve": "CVE-2018-18359",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18359"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18359",
"url": "https://www.suse.com/security/cve/CVE-2018-18359"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18359",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18359",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18359"
},
{
"cve": "CVE-2018-20073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20073"
}
],
"notes": [
{
"category": "general",
"text": "Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20073",
"url": "https://www.suse.com/security/cve/CVE-2018-20073"
},
{
"category": "external",
"summary": "SUSE Bug 1120892 for CVE-2018-20073",
"url": "https://bugzilla.suse.com/1120892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-20073"
},
{
"cve": "CVE-2018-4117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-4117"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-4117",
"url": "https://www.suse.com/security/cve/CVE-2018-4117"
},
{
"category": "external",
"summary": "SUSE Bug 1088182 for CVE-2018-4117",
"url": "https://bugzilla.suse.com/1088182"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-4117",
"url": "https://bugzilla.suse.com/1102530"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-4117"
},
{
"cve": "CVE-2018-5179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5179"
}
],
"notes": [
{
"category": "general",
"text": "A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5179",
"url": "https://www.suse.com/security/cve/CVE-2018-5179"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-5179",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-5179",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-5179"
},
{
"cve": "CVE-2018-6031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6031"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6031",
"url": "https://www.suse.com/security/cve/CVE-2018-6031"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6031",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6031"
},
{
"cve": "CVE-2018-6032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6032"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6032",
"url": "https://www.suse.com/security/cve/CVE-2018-6032"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6032",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6032"
},
{
"cve": "CVE-2018-6033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6033"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6033",
"url": "https://www.suse.com/security/cve/CVE-2018-6033"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6033",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6033"
},
{
"cve": "CVE-2018-6034",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6034"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6034",
"url": "https://www.suse.com/security/cve/CVE-2018-6034"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6034",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6034"
},
{
"cve": "CVE-2018-6035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6035"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6035",
"url": "https://www.suse.com/security/cve/CVE-2018-6035"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6035",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6035"
},
{
"cve": "CVE-2018-6036",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6036"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6036",
"url": "https://www.suse.com/security/cve/CVE-2018-6036"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6036",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6036"
},
{
"cve": "CVE-2018-6037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6037"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6037",
"url": "https://www.suse.com/security/cve/CVE-2018-6037"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6037",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6037"
},
{
"cve": "CVE-2018-6038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6038"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6038",
"url": "https://www.suse.com/security/cve/CVE-2018-6038"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6038",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6038"
},
{
"cve": "CVE-2018-6039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6039"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6039",
"url": "https://www.suse.com/security/cve/CVE-2018-6039"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6039",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6039"
},
{
"cve": "CVE-2018-6040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6040"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6040",
"url": "https://www.suse.com/security/cve/CVE-2018-6040"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6040",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6040"
},
{
"cve": "CVE-2018-6041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6041"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6041",
"url": "https://www.suse.com/security/cve/CVE-2018-6041"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6041",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6041"
},
{
"cve": "CVE-2018-6042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6042"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6042",
"url": "https://www.suse.com/security/cve/CVE-2018-6042"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6042",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6042"
},
{
"cve": "CVE-2018-6043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6043"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6043",
"url": "https://www.suse.com/security/cve/CVE-2018-6043"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6043",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6043"
},
{
"cve": "CVE-2018-6044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6044"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-16064. Reason: This candidate is a reservation duplicate of CVE-2018-16064. Notes: All CVE users should reference CVE-2018-16064 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6044",
"url": "https://www.suse.com/security/cve/CVE-2018-6044"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6044",
"url": "https://bugzilla.suse.com/1077571"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6044",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6044",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6044",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6044"
},
{
"cve": "CVE-2018-6045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6045"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6045",
"url": "https://www.suse.com/security/cve/CVE-2018-6045"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6045",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6045"
},
{
"cve": "CVE-2018-6046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6046"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6046",
"url": "https://www.suse.com/security/cve/CVE-2018-6046"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6046",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6046"
},
{
"cve": "CVE-2018-6047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6047"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6047",
"url": "https://www.suse.com/security/cve/CVE-2018-6047"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6047",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6047"
},
{
"cve": "CVE-2018-6048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6048"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak referrer information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6048",
"url": "https://www.suse.com/security/cve/CVE-2018-6048"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6048",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6048"
},
{
"cve": "CVE-2018-6049",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6049"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is granted via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6049",
"url": "https://www.suse.com/security/cve/CVE-2018-6049"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6049",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6049"
},
{
"cve": "CVE-2018-6050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6050"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6050",
"url": "https://www.suse.com/security/cve/CVE-2018-6050"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6050",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6050"
},
{
"cve": "CVE-2018-6051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6051"
}
],
"notes": [
{
"category": "general",
"text": "XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6051",
"url": "https://www.suse.com/security/cve/CVE-2018-6051"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6051",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6051"
},
{
"cve": "CVE-2018-6052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6052"
}
],
"notes": [
{
"category": "general",
"text": "Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6052",
"url": "https://www.suse.com/security/cve/CVE-2018-6052"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6052",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6052"
},
{
"cve": "CVE-2018-6053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6053"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6053",
"url": "https://www.suse.com/security/cve/CVE-2018-6053"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6053",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6053"
},
{
"cve": "CVE-2018-6054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6054"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6054",
"url": "https://www.suse.com/security/cve/CVE-2018-6054"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6054",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6054"
},
{
"cve": "CVE-2018-6056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6056"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6056",
"url": "https://www.suse.com/security/cve/CVE-2018-6056"
},
{
"category": "external",
"summary": "SUSE Bug 1080920 for CVE-2018-6056",
"url": "https://bugzilla.suse.com/1080920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6056"
},
{
"cve": "CVE-2018-6057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6057"
}
],
"notes": [
{
"category": "general",
"text": "Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6057",
"url": "https://www.suse.com/security/cve/CVE-2018-6057"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6057",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6057"
},
{
"cve": "CVE-2018-6060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6060"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6060",
"url": "https://www.suse.com/security/cve/CVE-2018-6060"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6060",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6060"
},
{
"cve": "CVE-2018-6061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6061"
}
],
"notes": [
{
"category": "general",
"text": "A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6061",
"url": "https://www.suse.com/security/cve/CVE-2018-6061"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6061",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6061"
},
{
"cve": "CVE-2018-6062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6062"
}
],
"notes": [
{
"category": "general",
"text": "Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6062",
"url": "https://www.suse.com/security/cve/CVE-2018-6062"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6062",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6062"
},
{
"cve": "CVE-2018-6063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6063"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6063",
"url": "https://www.suse.com/security/cve/CVE-2018-6063"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6063",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6063"
},
{
"cve": "CVE-2018-6064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6064"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6064",
"url": "https://www.suse.com/security/cve/CVE-2018-6064"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6064",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6064"
},
{
"cve": "CVE-2018-6065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6065"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6065",
"url": "https://www.suse.com/security/cve/CVE-2018-6065"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6065",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6065"
},
{
"cve": "CVE-2018-6066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6066"
}
],
"notes": [
{
"category": "general",
"text": "Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6066",
"url": "https://www.suse.com/security/cve/CVE-2018-6066"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6066",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6066"
},
{
"cve": "CVE-2018-6067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6067"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6067",
"url": "https://www.suse.com/security/cve/CVE-2018-6067"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6067",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6067"
},
{
"cve": "CVE-2018-6068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6068"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6068",
"url": "https://www.suse.com/security/cve/CVE-2018-6068"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6068",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6068"
},
{
"cve": "CVE-2018-6069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6069"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6069",
"url": "https://www.suse.com/security/cve/CVE-2018-6069"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6069",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6069"
},
{
"cve": "CVE-2018-6070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6070"
}
],
"notes": [
{
"category": "general",
"text": "Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6070",
"url": "https://www.suse.com/security/cve/CVE-2018-6070"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6070",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6070"
},
{
"cve": "CVE-2018-6071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6071"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6071",
"url": "https://www.suse.com/security/cve/CVE-2018-6071"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6071",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6071"
},
{
"cve": "CVE-2018-6072",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6072"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6072",
"url": "https://www.suse.com/security/cve/CVE-2018-6072"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6072",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6072"
},
{
"cve": "CVE-2018-6073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6073"
}
],
"notes": [
{
"category": "general",
"text": "A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6073",
"url": "https://www.suse.com/security/cve/CVE-2018-6073"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6073",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6073"
},
{
"cve": "CVE-2018-6074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6074"
}
],
"notes": [
{
"category": "general",
"text": "Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6074",
"url": "https://www.suse.com/security/cve/CVE-2018-6074"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6074",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6074"
},
{
"cve": "CVE-2018-6075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6075"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6075",
"url": "https://www.suse.com/security/cve/CVE-2018-6075"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6075",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6075"
},
{
"cve": "CVE-2018-6076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6076"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6076",
"url": "https://www.suse.com/security/cve/CVE-2018-6076"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6076",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6076"
},
{
"cve": "CVE-2018-6077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6077"
}
],
"notes": [
{
"category": "general",
"text": "Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6077",
"url": "https://www.suse.com/security/cve/CVE-2018-6077"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6077",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6077"
},
{
"cve": "CVE-2018-6078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6078"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6078",
"url": "https://www.suse.com/security/cve/CVE-2018-6078"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6078",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6078"
},
{
"cve": "CVE-2018-6079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6079"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6079",
"url": "https://www.suse.com/security/cve/CVE-2018-6079"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6079",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6079"
},
{
"cve": "CVE-2018-6080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6080"
}
],
"notes": [
{
"category": "general",
"text": "Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to obtain memory metadata from privileged processes .",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6080",
"url": "https://www.suse.com/security/cve/CVE-2018-6080"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6080",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6080"
},
{
"cve": "CVE-2018-6081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6081"
}
],
"notes": [
{
"category": "general",
"text": "XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open Developer Console to inject arbitrary scripts or HTML via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6081",
"url": "https://www.suse.com/security/cve/CVE-2018-6081"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6081",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6081"
},
{
"cve": "CVE-2018-6082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6082"
}
],
"notes": [
{
"category": "general",
"text": "Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6082",
"url": "https://www.suse.com/security/cve/CVE-2018-6082"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6082",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6082"
},
{
"cve": "CVE-2018-6083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6083"
}
],
"notes": [
{
"category": "general",
"text": "Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6083",
"url": "https://www.suse.com/security/cve/CVE-2018-6083"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6083",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6083"
},
{
"cve": "CVE-2018-6085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6085"
}
],
"notes": [
{
"category": "general",
"text": "Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6085",
"url": "https://www.suse.com/security/cve/CVE-2018-6085"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6085",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6085"
},
{
"cve": "CVE-2018-6086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6086"
}
],
"notes": [
{
"category": "general",
"text": "A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6086",
"url": "https://www.suse.com/security/cve/CVE-2018-6086"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6086",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6086"
},
{
"cve": "CVE-2018-6087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6087"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6087",
"url": "https://www.suse.com/security/cve/CVE-2018-6087"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6087",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6087"
},
{
"cve": "CVE-2018-6088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6088"
}
],
"notes": [
{
"category": "general",
"text": "An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6088",
"url": "https://www.suse.com/security/cve/CVE-2018-6088"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6088",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6088"
},
{
"cve": "CVE-2018-6089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6089"
}
],
"notes": [
{
"category": "general",
"text": "A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6089",
"url": "https://www.suse.com/security/cve/CVE-2018-6089"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6089",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6089"
},
{
"cve": "CVE-2018-6090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6090"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6090",
"url": "https://www.suse.com/security/cve/CVE-2018-6090"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6090",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6090"
},
{
"cve": "CVE-2018-6091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6091"
}
],
"notes": [
{
"category": "general",
"text": "Service Workers can intercept any request made by an \u003cembed\u003e or \u003cobject\u003e tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6091",
"url": "https://www.suse.com/security/cve/CVE-2018-6091"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6091",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6091"
},
{
"cve": "CVE-2018-6092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6092"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6092",
"url": "https://www.suse.com/security/cve/CVE-2018-6092"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6092",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6092"
},
{
"cve": "CVE-2018-6093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6093"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6093",
"url": "https://www.suse.com/security/cve/CVE-2018-6093"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6093",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6093"
},
{
"cve": "CVE-2018-6094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6094"
}
],
"notes": [
{
"category": "general",
"text": "Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6094",
"url": "https://www.suse.com/security/cve/CVE-2018-6094"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6094",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6094"
},
{
"cve": "CVE-2018-6095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6095"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6095",
"url": "https://www.suse.com/security/cve/CVE-2018-6095"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6095",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6095"
},
{
"cve": "CVE-2018-6096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6096"
}
],
"notes": [
{
"category": "general",
"text": "A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6096",
"url": "https://www.suse.com/security/cve/CVE-2018-6096"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6096",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6096"
},
{
"cve": "CVE-2018-6097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6097"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen without showing a warning via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6097",
"url": "https://www.suse.com/security/cve/CVE-2018-6097"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6097",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6097"
},
{
"cve": "CVE-2018-6098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6098"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6098",
"url": "https://www.suse.com/security/cve/CVE-2018-6098"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6098",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6098"
},
{
"cve": "CVE-2018-6099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6099"
}
],
"notes": [
{
"category": "general",
"text": "A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6099",
"url": "https://www.suse.com/security/cve/CVE-2018-6099"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6099",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6099"
},
{
"cve": "CVE-2018-6100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6100"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6100",
"url": "https://www.suse.com/security/cve/CVE-2018-6100"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6100",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6100"
},
{
"cve": "CVE-2018-6101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6101"
}
],
"notes": [
{
"category": "general",
"text": "A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote DevTools debugging server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6101",
"url": "https://www.suse.com/security/cve/CVE-2018-6101"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6101",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6101"
},
{
"cve": "CVE-2018-6102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6102"
}
],
"notes": [
{
"category": "general",
"text": "Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6102",
"url": "https://www.suse.com/security/cve/CVE-2018-6102"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6102",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6102"
},
{
"cve": "CVE-2018-6103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6103"
}
],
"notes": [
{
"category": "general",
"text": "A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6103",
"url": "https://www.suse.com/security/cve/CVE-2018-6103"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6103",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6103"
},
{
"cve": "CVE-2018-6104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6104"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6104",
"url": "https://www.suse.com/security/cve/CVE-2018-6104"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6104",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6104"
},
{
"cve": "CVE-2018-6105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6105"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6105",
"url": "https://www.suse.com/security/cve/CVE-2018-6105"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6105",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6105"
},
{
"cve": "CVE-2018-6106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6106"
}
],
"notes": [
{
"category": "general",
"text": "An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6106",
"url": "https://www.suse.com/security/cve/CVE-2018-6106"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6106",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6106"
},
{
"cve": "CVE-2018-6107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6107"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6107",
"url": "https://www.suse.com/security/cve/CVE-2018-6107"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6107",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6107"
},
{
"cve": "CVE-2018-6108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6108"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6108",
"url": "https://www.suse.com/security/cve/CVE-2018-6108"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6108",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6108"
},
{
"cve": "CVE-2018-6109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6109"
}
],
"notes": [
{
"category": "general",
"text": "readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6109",
"url": "https://www.suse.com/security/cve/CVE-2018-6109"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6109",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6109"
},
{
"cve": "CVE-2018-6110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6110"
}
],
"notes": [
{
"category": "general",
"text": "Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6110",
"url": "https://www.suse.com/security/cve/CVE-2018-6110"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6110",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6110"
},
{
"cve": "CVE-2018-6111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6111"
}
],
"notes": [
{
"category": "general",
"text": "An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6111",
"url": "https://www.suse.com/security/cve/CVE-2018-6111"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6111",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6111"
},
{
"cve": "CVE-2018-6112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6112"
}
],
"notes": [
{
"category": "general",
"text": "Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6112",
"url": "https://www.suse.com/security/cve/CVE-2018-6112"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6112",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6112"
},
{
"cve": "CVE-2018-6113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6113"
}
],
"notes": [
{
"category": "general",
"text": "Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6113",
"url": "https://www.suse.com/security/cve/CVE-2018-6113"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6113",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6113"
},
{
"cve": "CVE-2018-6114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6114"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect enforcement of CSP for \u003cobject\u003e tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6114",
"url": "https://www.suse.com/security/cve/CVE-2018-6114"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6114",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6114"
},
{
"cve": "CVE-2018-6115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6115"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially bypass OS malware checks via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6115",
"url": "https://www.suse.com/security/cve/CVE-2018-6115"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6115",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6115"
},
{
"cve": "CVE-2018-6116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6116"
}
],
"notes": [
{
"category": "general",
"text": "A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6116",
"url": "https://www.suse.com/security/cve/CVE-2018-6116"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6116",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6116"
},
{
"cve": "CVE-2018-6117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6117"
}
],
"notes": [
{
"category": "general",
"text": "Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6117",
"url": "https://www.suse.com/security/cve/CVE-2018-6117"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6117",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6117"
},
{
"cve": "CVE-2018-6118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6118"
}
],
"notes": [
{
"category": "general",
"text": "A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6118",
"url": "https://www.suse.com/security/cve/CVE-2018-6118"
},
{
"category": "external",
"summary": "SUSE Bug 1091288 for CVE-2018-6118",
"url": "https://bugzilla.suse.com/1091288"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6118"
},
{
"cve": "CVE-2018-6120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6120"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6120",
"url": "https://www.suse.com/security/cve/CVE-2018-6120"
},
{
"category": "external",
"summary": "SUSE Bug 1092923 for CVE-2018-6120",
"url": "https://bugzilla.suse.com/1092923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6120"
},
{
"cve": "CVE-2018-6121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6121"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6121",
"url": "https://www.suse.com/security/cve/CVE-2018-6121"
},
{
"category": "external",
"summary": "SUSE Bug 1092923 for CVE-2018-6121",
"url": "https://bugzilla.suse.com/1092923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6121"
},
{
"cve": "CVE-2018-6122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6122"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6122",
"url": "https://www.suse.com/security/cve/CVE-2018-6122"
},
{
"category": "external",
"summary": "SUSE Bug 1092923 for CVE-2018-6122",
"url": "https://bugzilla.suse.com/1092923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6122"
},
{
"cve": "CVE-2018-6123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6123"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6123",
"url": "https://www.suse.com/security/cve/CVE-2018-6123"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6123",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6123"
},
{
"cve": "CVE-2018-6124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6124"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6124",
"url": "https://www.suse.com/security/cve/CVE-2018-6124"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6124",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6124"
},
{
"cve": "CVE-2018-6125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6125"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6125",
"url": "https://www.suse.com/security/cve/CVE-2018-6125"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6125",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6125"
},
{
"cve": "CVE-2018-6126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6126"
}
],
"notes": [
{
"category": "general",
"text": "A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6126",
"url": "https://www.suse.com/security/cve/CVE-2018-6126"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6126",
"url": "https://bugzilla.suse.com/1095163"
},
{
"category": "external",
"summary": "SUSE Bug 1096449 for CVE-2018-6126",
"url": "https://bugzilla.suse.com/1096449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6126"
},
{
"cve": "CVE-2018-6127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6127"
}
],
"notes": [
{
"category": "general",
"text": "Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6127",
"url": "https://www.suse.com/security/cve/CVE-2018-6127"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6127",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-6127"
},
{
"cve": "CVE-2018-6128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6128"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6128",
"url": "https://www.suse.com/security/cve/CVE-2018-6128"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6128",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6128"
},
{
"cve": "CVE-2018-6129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6129"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6129",
"url": "https://www.suse.com/security/cve/CVE-2018-6129"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6129",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6129"
},
{
"cve": "CVE-2018-6130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6130"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6130",
"url": "https://www.suse.com/security/cve/CVE-2018-6130"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6130",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6130"
},
{
"cve": "CVE-2018-6131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6131"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6131",
"url": "https://www.suse.com/security/cve/CVE-2018-6131"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6131",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6131"
},
{
"cve": "CVE-2018-6132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6132"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6132",
"url": "https://www.suse.com/security/cve/CVE-2018-6132"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6132",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6132"
},
{
"cve": "CVE-2018-6133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6133"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6133",
"url": "https://www.suse.com/security/cve/CVE-2018-6133"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6133",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6133"
},
{
"cve": "CVE-2018-6134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6134"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6134",
"url": "https://www.suse.com/security/cve/CVE-2018-6134"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6134",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6134"
},
{
"cve": "CVE-2018-6135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6135"
}
],
"notes": [
{
"category": "general",
"text": "Lack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6135",
"url": "https://www.suse.com/security/cve/CVE-2018-6135"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6135",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6135"
},
{
"cve": "CVE-2018-6136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6136"
}
],
"notes": [
{
"category": "general",
"text": "Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6136",
"url": "https://www.suse.com/security/cve/CVE-2018-6136"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6136",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6136"
},
{
"cve": "CVE-2018-6137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6137"
}
],
"notes": [
{
"category": "general",
"text": "CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6137",
"url": "https://www.suse.com/security/cve/CVE-2018-6137"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6137",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6137"
},
{
"cve": "CVE-2018-6138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6138"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6138",
"url": "https://www.suse.com/security/cve/CVE-2018-6138"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6138",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6138"
},
{
"cve": "CVE-2018-6139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6139"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6139",
"url": "https://www.suse.com/security/cve/CVE-2018-6139"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6139",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6139"
},
{
"cve": "CVE-2018-6140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6140"
}
],
"notes": [
{
"category": "general",
"text": "Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6140",
"url": "https://www.suse.com/security/cve/CVE-2018-6140"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6140",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-6140"
},
{
"cve": "CVE-2018-6141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6141"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6141",
"url": "https://www.suse.com/security/cve/CVE-2018-6141"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6141",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6141"
},
{
"cve": "CVE-2018-6142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6142"
}
],
"notes": [
{
"category": "general",
"text": "Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6142",
"url": "https://www.suse.com/security/cve/CVE-2018-6142"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6142",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6142"
},
{
"cve": "CVE-2018-6143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6143"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6143",
"url": "https://www.suse.com/security/cve/CVE-2018-6143"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6143",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6143"
},
{
"cve": "CVE-2018-6144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6144"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6144",
"url": "https://www.suse.com/security/cve/CVE-2018-6144"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6144",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6144"
},
{
"cve": "CVE-2018-6145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6145"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6145",
"url": "https://www.suse.com/security/cve/CVE-2018-6145"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6145",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6145"
},
{
"cve": "CVE-2018-6147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6147"
}
],
"notes": [
{
"category": "general",
"text": "Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information from process memory via a local process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6147",
"url": "https://www.suse.com/security/cve/CVE-2018-6147"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6147",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6147"
},
{
"cve": "CVE-2018-6148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6148"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6148",
"url": "https://www.suse.com/security/cve/CVE-2018-6148"
},
{
"category": "external",
"summary": "SUSE Bug 1096508 for CVE-2018-6148",
"url": "https://bugzilla.suse.com/1096508"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6148"
},
{
"cve": "CVE-2018-6149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6149"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6149",
"url": "https://www.suse.com/security/cve/CVE-2018-6149"
},
{
"category": "external",
"summary": "SUSE Bug 1097452 for CVE-2018-6149",
"url": "https://bugzilla.suse.com/1097452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6149"
},
{
"cve": "CVE-2018-6153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6153"
}
],
"notes": [
{
"category": "general",
"text": "A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6153",
"url": "https://www.suse.com/security/cve/CVE-2018-6153"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6153",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6153",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6153",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6153"
},
{
"cve": "CVE-2018-6154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6154"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6154",
"url": "https://www.suse.com/security/cve/CVE-2018-6154"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6154",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6154",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6154",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6154"
},
{
"cve": "CVE-2018-6155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6155"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6155",
"url": "https://www.suse.com/security/cve/CVE-2018-6155"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6155",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6155",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6155",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6155"
},
{
"cve": "CVE-2018-6156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6156"
}
],
"notes": [
{
"category": "general",
"text": "Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6156",
"url": "https://www.suse.com/security/cve/CVE-2018-6156"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6156",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6156",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6156",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6156"
},
{
"cve": "CVE-2018-6157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6157"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6157",
"url": "https://www.suse.com/security/cve/CVE-2018-6157"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6157",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6157",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6157",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6157"
},
{
"cve": "CVE-2018-6158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6158"
}
],
"notes": [
{
"category": "general",
"text": "A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6158",
"url": "https://www.suse.com/security/cve/CVE-2018-6158"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6158",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6158",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6158",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6158"
},
{
"cve": "CVE-2018-6159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6159"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6159",
"url": "https://www.suse.com/security/cve/CVE-2018-6159"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6159",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6159",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6159",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6159"
},
{
"cve": "CVE-2018-6160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6160"
}
],
"notes": [
{
"category": "general",
"text": "JavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6160",
"url": "https://www.suse.com/security/cve/CVE-2018-6160"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6160",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6160",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6160",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6160"
},
{
"cve": "CVE-2018-6161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6161"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6161",
"url": "https://www.suse.com/security/cve/CVE-2018-6161"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6161",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6161",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6161",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6161"
},
{
"cve": "CVE-2018-6162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6162"
}
],
"notes": [
{
"category": "general",
"text": "Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6162",
"url": "https://www.suse.com/security/cve/CVE-2018-6162"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6162",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6162",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6162",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6162"
},
{
"cve": "CVE-2018-6163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6163"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6163",
"url": "https://www.suse.com/security/cve/CVE-2018-6163"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6163",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6163",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6163",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6163"
},
{
"cve": "CVE-2018-6164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6164"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6164",
"url": "https://www.suse.com/security/cve/CVE-2018-6164"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6164",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6164",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6164",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6164"
},
{
"cve": "CVE-2018-6165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6165"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6165",
"url": "https://www.suse.com/security/cve/CVE-2018-6165"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6165",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6165",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6165",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6165"
},
{
"cve": "CVE-2018-6166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6166"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6166",
"url": "https://www.suse.com/security/cve/CVE-2018-6166"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6166",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6166",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6166",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6166"
},
{
"cve": "CVE-2018-6167",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6167"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6167",
"url": "https://www.suse.com/security/cve/CVE-2018-6167"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6167",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6167",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6167",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6167"
},
{
"cve": "CVE-2018-6168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6168"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6168",
"url": "https://www.suse.com/security/cve/CVE-2018-6168"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6168",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6168",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6168",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6168"
},
{
"cve": "CVE-2018-6169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6169"
}
],
"notes": [
{
"category": "general",
"text": "Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6169",
"url": "https://www.suse.com/security/cve/CVE-2018-6169"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6169",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6169",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6169",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6169"
},
{
"cve": "CVE-2018-6170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6170"
}
],
"notes": [
{
"category": "general",
"text": "A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6170",
"url": "https://www.suse.com/security/cve/CVE-2018-6170"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6170",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6170",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6170",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6170"
},
{
"cve": "CVE-2018-6171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6171"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6171",
"url": "https://www.suse.com/security/cve/CVE-2018-6171"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6171",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6171",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6171",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6171"
},
{
"cve": "CVE-2018-6172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6172"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6172",
"url": "https://www.suse.com/security/cve/CVE-2018-6172"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6172",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6172",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6172",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6172"
},
{
"cve": "CVE-2018-6173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6173"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6173",
"url": "https://www.suse.com/security/cve/CVE-2018-6173"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6173",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6173",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6173",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6173"
},
{
"cve": "CVE-2018-6174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6174"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6174",
"url": "https://www.suse.com/security/cve/CVE-2018-6174"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6174",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6174",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6174",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6174"
},
{
"cve": "CVE-2018-6175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6175"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6175",
"url": "https://www.suse.com/security/cve/CVE-2018-6175"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6175",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6175",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6175",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6175"
},
{
"cve": "CVE-2018-6176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6176"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6176",
"url": "https://www.suse.com/security/cve/CVE-2018-6176"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6176",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6176",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6176",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6176"
},
{
"cve": "CVE-2018-6177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6177"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6177",
"url": "https://www.suse.com/security/cve/CVE-2018-6177"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6177",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6177",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6177",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6177"
},
{
"cve": "CVE-2018-6178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6178"
}
],
"notes": [
{
"category": "general",
"text": "Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to Hide Chrome Security UI via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6178",
"url": "https://www.suse.com/security/cve/CVE-2018-6178"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6178",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6178",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6178",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6178"
},
{
"cve": "CVE-2018-6179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6179"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6179",
"url": "https://www.suse.com/security/cve/CVE-2018-6179"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6179",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6179",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6179",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6179"
},
{
"cve": "CVE-2018-6406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6406"
}
],
"notes": [
{
"category": "general",
"text": "The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or possibly have unspecified other impact.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6406",
"url": "https://www.suse.com/security/cve/CVE-2018-6406"
},
{
"category": "external",
"summary": "SUSE Bug 1078463 for CVE-2018-6406",
"url": "https://bugzilla.suse.com/1078463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6406"
},
{
"cve": "CVE-2019-13659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13659"
}
],
"notes": [
{
"category": "general",
"text": "IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13659",
"url": "https://www.suse.com/security/cve/CVE-2019-13659"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13659",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13659"
},
{
"cve": "CVE-2019-13660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13660"
}
],
"notes": [
{
"category": "general",
"text": "UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13660",
"url": "https://www.suse.com/security/cve/CVE-2019-13660"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13660",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13660"
},
{
"cve": "CVE-2019-13661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13661"
}
],
"notes": [
{
"category": "general",
"text": "UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13661",
"url": "https://www.suse.com/security/cve/CVE-2019-13661"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13661",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13661"
},
{
"cve": "CVE-2019-13662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13662"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13662",
"url": "https://www.suse.com/security/cve/CVE-2019-13662"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13662",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13662"
},
{
"cve": "CVE-2019-13663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13663"
}
],
"notes": [
{
"category": "general",
"text": "IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13663",
"url": "https://www.suse.com/security/cve/CVE-2019-13663"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13663",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13663"
},
{
"cve": "CVE-2019-13664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13664"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13664",
"url": "https://www.suse.com/security/cve/CVE-2019-13664"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13664",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13664"
},
{
"cve": "CVE-2019-13665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13665"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple file download protection via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13665",
"url": "https://www.suse.com/security/cve/CVE-2019-13665"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13665",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13665"
},
{
"cve": "CVE-2019-13666",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13666"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13666",
"url": "https://www.suse.com/security/cve/CVE-2019-13666"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13666",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13666"
},
{
"cve": "CVE-2019-13667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13667"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13667",
"url": "https://www.suse.com/security/cve/CVE-2019-13667"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13667",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13667"
},
{
"cve": "CVE-2019-13668",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13668"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13668",
"url": "https://www.suse.com/security/cve/CVE-2019-13668"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13668",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13668"
},
{
"cve": "CVE-2019-13669",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13669"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect data validation in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13669",
"url": "https://www.suse.com/security/cve/CVE-2019-13669"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13669",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13669"
},
{
"cve": "CVE-2019-13670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13670"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13670",
"url": "https://www.suse.com/security/cve/CVE-2019-13670"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13670",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13670"
},
{
"cve": "CVE-2019-13671",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13671"
}
],
"notes": [
{
"category": "general",
"text": "UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13671",
"url": "https://www.suse.com/security/cve/CVE-2019-13671"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13671",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13671"
},
{
"cve": "CVE-2019-13673",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13673"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13673",
"url": "https://www.suse.com/security/cve/CVE-2019-13673"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13673",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13673"
},
{
"cve": "CVE-2019-13674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13674"
}
],
"notes": [
{
"category": "general",
"text": "IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13674",
"url": "https://www.suse.com/security/cve/CVE-2019-13674"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13674",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13674"
},
{
"cve": "CVE-2019-13675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13675"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in extensions in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to disable extensions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13675",
"url": "https://www.suse.com/security/cve/CVE-2019-13675"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13675",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13675"
},
{
"cve": "CVE-2019-13676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13676"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13676",
"url": "https://www.suse.com/security/cve/CVE-2019-13676"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13676",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13676"
},
{
"cve": "CVE-2019-13677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13677"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in site isolation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13677",
"url": "https://www.suse.com/security/cve/CVE-2019-13677"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13677",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13677"
},
{
"cve": "CVE-2019-13678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13678"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13678",
"url": "https://www.suse.com/security/cve/CVE-2019-13678"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13678",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13678"
},
{
"cve": "CVE-2019-13679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13679"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13679",
"url": "https://www.suse.com/security/cve/CVE-2019-13679"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13679",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13679"
},
{
"cve": "CVE-2019-13680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13680"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13680",
"url": "https://www.suse.com/security/cve/CVE-2019-13680"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13680",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13680"
},
{
"cve": "CVE-2019-13681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13681"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass download restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13681",
"url": "https://www.suse.com/security/cve/CVE-2019-13681"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13681",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13681"
},
{
"cve": "CVE-2019-13682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13682"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in external protocol handling in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13682",
"url": "https://www.suse.com/security/cve/CVE-2019-13682"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13682",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13682"
},
{
"cve": "CVE-2019-13683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13683"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13683",
"url": "https://www.suse.com/security/cve/CVE-2019-13683"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13683",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13683"
},
{
"cve": "CVE-2019-13685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13685"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in sharing view in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13685",
"url": "https://www.suse.com/security/cve/CVE-2019-13685"
},
{
"category": "external",
"summary": "SUSE Bug 1151229 for CVE-2019-13685",
"url": "https://bugzilla.suse.com/1151229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13685"
},
{
"cve": "CVE-2019-13686",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13686"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13686",
"url": "https://www.suse.com/security/cve/CVE-2019-13686"
},
{
"category": "external",
"summary": "SUSE Bug 1151229 for CVE-2019-13686",
"url": "https://bugzilla.suse.com/1151229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13686"
},
{
"cve": "CVE-2019-13687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13687"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13687",
"url": "https://www.suse.com/security/cve/CVE-2019-13687"
},
{
"category": "external",
"summary": "SUSE Bug 1151229 for CVE-2019-13687",
"url": "https://bugzilla.suse.com/1151229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13687"
},
{
"cve": "CVE-2019-13688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13688"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13688",
"url": "https://www.suse.com/security/cve/CVE-2019-13688"
},
{
"category": "external",
"summary": "SUSE Bug 1151229 for CVE-2019-13688",
"url": "https://bugzilla.suse.com/1151229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13688"
},
{
"cve": "CVE-2019-13693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13693"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13693",
"url": "https://www.suse.com/security/cve/CVE-2019-13693"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13693",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13693"
},
{
"cve": "CVE-2019-13694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13694"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13694",
"url": "https://www.suse.com/security/cve/CVE-2019-13694"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13694",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13694"
},
{
"cve": "CVE-2019-13695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13695"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13695",
"url": "https://www.suse.com/security/cve/CVE-2019-13695"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13695",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13695"
},
{
"cve": "CVE-2019-13696",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13696"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in JavaScript in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13696",
"url": "https://www.suse.com/security/cve/CVE-2019-13696"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13696",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13696"
},
{
"cve": "CVE-2019-13697",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13697"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13697",
"url": "https://www.suse.com/security/cve/CVE-2019-13697"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13697",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13697"
},
{
"cve": "CVE-2019-13699",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13699"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13699",
"url": "https://www.suse.com/security/cve/CVE-2019-13699"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13699",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13699"
},
{
"cve": "CVE-2019-13700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13700"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13700",
"url": "https://www.suse.com/security/cve/CVE-2019-13700"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13700",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13700"
},
{
"cve": "CVE-2019-13701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13701"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13701",
"url": "https://www.suse.com/security/cve/CVE-2019-13701"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13701",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13701"
},
{
"cve": "CVE-2019-13702",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13702"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13702",
"url": "https://www.suse.com/security/cve/CVE-2019-13702"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13702",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13702"
},
{
"cve": "CVE-2019-13703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13703"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13703",
"url": "https://www.suse.com/security/cve/CVE-2019-13703"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13703",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13703"
},
{
"cve": "CVE-2019-13704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13704"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13704",
"url": "https://www.suse.com/security/cve/CVE-2019-13704"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13704",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13704"
},
{
"cve": "CVE-2019-13705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13705"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13705",
"url": "https://www.suse.com/security/cve/CVE-2019-13705"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13705",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13705"
},
{
"cve": "CVE-2019-13706",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13706"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13706",
"url": "https://www.suse.com/security/cve/CVE-2019-13706"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13706",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13706"
},
{
"cve": "CVE-2019-13707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13707"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13707",
"url": "https://www.suse.com/security/cve/CVE-2019-13707"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13707",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13707"
},
{
"cve": "CVE-2019-13708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13708"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13708",
"url": "https://www.suse.com/security/cve/CVE-2019-13708"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13708",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13708"
},
{
"cve": "CVE-2019-13709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13709"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13709",
"url": "https://www.suse.com/security/cve/CVE-2019-13709"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13709",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13709"
},
{
"cve": "CVE-2019-13710",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13710"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13710",
"url": "https://www.suse.com/security/cve/CVE-2019-13710"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13710",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13710"
},
{
"cve": "CVE-2019-13711",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13711"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13711",
"url": "https://www.suse.com/security/cve/CVE-2019-13711"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13711",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13711"
},
{
"cve": "CVE-2019-13713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13713"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13713",
"url": "https://www.suse.com/security/cve/CVE-2019-13713"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13713",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13713"
},
{
"cve": "CVE-2019-13714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13714"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13714",
"url": "https://www.suse.com/security/cve/CVE-2019-13714"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13714",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13714"
},
{
"cve": "CVE-2019-13715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13715"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13715",
"url": "https://www.suse.com/security/cve/CVE-2019-13715"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13715",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13715"
},
{
"cve": "CVE-2019-13716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13716"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13716",
"url": "https://www.suse.com/security/cve/CVE-2019-13716"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13716",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13716"
},
{
"cve": "CVE-2019-13717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13717"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13717",
"url": "https://www.suse.com/security/cve/CVE-2019-13717"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13717",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13717"
},
{
"cve": "CVE-2019-13718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13718"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13718",
"url": "https://www.suse.com/security/cve/CVE-2019-13718"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13718",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13718"
},
{
"cve": "CVE-2019-13719",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13719"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13719",
"url": "https://www.suse.com/security/cve/CVE-2019-13719"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13719",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13719"
},
{
"cve": "CVE-2019-13720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13720"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13720",
"url": "https://www.suse.com/security/cve/CVE-2019-13720"
},
{
"category": "external",
"summary": "SUSE Bug 1155643 for CVE-2019-13720",
"url": "https://bugzilla.suse.com/1155643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13720"
},
{
"cve": "CVE-2019-13721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13721"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13721",
"url": "https://www.suse.com/security/cve/CVE-2019-13721"
},
{
"category": "external",
"summary": "SUSE Bug 1155643 for CVE-2019-13721",
"url": "https://bugzilla.suse.com/1155643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13721"
},
{
"cve": "CVE-2019-13723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13723"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13723",
"url": "https://www.suse.com/security/cve/CVE-2019-13723"
},
{
"category": "external",
"summary": "SUSE Bug 1157269 for CVE-2019-13723",
"url": "https://bugzilla.suse.com/1157269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13723"
},
{
"cve": "CVE-2019-13724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13724"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13724",
"url": "https://www.suse.com/security/cve/CVE-2019-13724"
},
{
"category": "external",
"summary": "SUSE Bug 1157269 for CVE-2019-13724",
"url": "https://bugzilla.suse.com/1157269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13724"
},
{
"cve": "CVE-2019-13725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13725"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13725",
"url": "https://www.suse.com/security/cve/CVE-2019-13725"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13725",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13725"
},
{
"cve": "CVE-2019-13726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13726"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13726",
"url": "https://www.suse.com/security/cve/CVE-2019-13726"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13726",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13726"
},
{
"cve": "CVE-2019-13727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13727"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13727",
"url": "https://www.suse.com/security/cve/CVE-2019-13727"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13727",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13727"
},
{
"cve": "CVE-2019-13728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13728"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13728",
"url": "https://www.suse.com/security/cve/CVE-2019-13728"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13728",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13728"
},
{
"cve": "CVE-2019-13729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13729"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13729",
"url": "https://www.suse.com/security/cve/CVE-2019-13729"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13729",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13729"
},
{
"cve": "CVE-2019-13730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13730"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13730",
"url": "https://www.suse.com/security/cve/CVE-2019-13730"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13730",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13730"
},
{
"cve": "CVE-2019-13732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13732"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13732",
"url": "https://www.suse.com/security/cve/CVE-2019-13732"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13732",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13732"
},
{
"cve": "CVE-2019-13734",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13734"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13734",
"url": "https://www.suse.com/security/cve/CVE-2019-13734"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13734",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13734"
},
{
"cve": "CVE-2019-13735",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13735"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13735",
"url": "https://www.suse.com/security/cve/CVE-2019-13735"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13735",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13735"
},
{
"cve": "CVE-2019-13736",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13736"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13736",
"url": "https://www.suse.com/security/cve/CVE-2019-13736"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13736",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13736"
},
{
"cve": "CVE-2019-13737",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13737"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in autocomplete in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13737",
"url": "https://www.suse.com/security/cve/CVE-2019-13737"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13737",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13737"
},
{
"cve": "CVE-2019-13738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13738"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13738",
"url": "https://www.suse.com/security/cve/CVE-2019-13738"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13738",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13738"
},
{
"cve": "CVE-2019-13739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13739"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13739",
"url": "https://www.suse.com/security/cve/CVE-2019-13739"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13739",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13739"
},
{
"cve": "CVE-2019-13740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13740"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13740",
"url": "https://www.suse.com/security/cve/CVE-2019-13740"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13740",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13740"
},
{
"cve": "CVE-2019-13741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13741"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13741",
"url": "https://www.suse.com/security/cve/CVE-2019-13741"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13741",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13741"
},
{
"cve": "CVE-2019-13742",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13742"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13742",
"url": "https://www.suse.com/security/cve/CVE-2019-13742"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13742",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13742"
},
{
"cve": "CVE-2019-13743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13743"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13743",
"url": "https://www.suse.com/security/cve/CVE-2019-13743"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13743",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13743"
},
{
"cve": "CVE-2019-13744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13744"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13744",
"url": "https://www.suse.com/security/cve/CVE-2019-13744"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13744",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13744"
},
{
"cve": "CVE-2019-13745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13745"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13745",
"url": "https://www.suse.com/security/cve/CVE-2019-13745"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13745",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13745"
},
{
"cve": "CVE-2019-13746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13746"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13746",
"url": "https://www.suse.com/security/cve/CVE-2019-13746"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13746",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13746"
},
{
"cve": "CVE-2019-13747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13747"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13747",
"url": "https://www.suse.com/security/cve/CVE-2019-13747"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13747",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13747"
},
{
"cve": "CVE-2019-13748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13748"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13748",
"url": "https://www.suse.com/security/cve/CVE-2019-13748"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13748",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13748"
},
{
"cve": "CVE-2019-13749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13749"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13749",
"url": "https://www.suse.com/security/cve/CVE-2019-13749"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13749",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13749"
},
{
"cve": "CVE-2019-13750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13750"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13750",
"url": "https://www.suse.com/security/cve/CVE-2019-13750"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13750",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13750"
},
{
"cve": "CVE-2019-13751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13751"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13751",
"url": "https://www.suse.com/security/cve/CVE-2019-13751"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13751",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13751"
},
{
"cve": "CVE-2019-13752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13752"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13752",
"url": "https://www.suse.com/security/cve/CVE-2019-13752"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13752",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13752"
},
{
"cve": "CVE-2019-13753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13753"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13753",
"url": "https://www.suse.com/security/cve/CVE-2019-13753"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13753",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13753"
},
{
"cve": "CVE-2019-13754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13754"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13754",
"url": "https://www.suse.com/security/cve/CVE-2019-13754"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13754",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13754"
},
{
"cve": "CVE-2019-13755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13755"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13755",
"url": "https://www.suse.com/security/cve/CVE-2019-13755"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13755",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13755"
},
{
"cve": "CVE-2019-13756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13756"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13756",
"url": "https://www.suse.com/security/cve/CVE-2019-13756"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13756",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13756"
},
{
"cve": "CVE-2019-13757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13757"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13757",
"url": "https://www.suse.com/security/cve/CVE-2019-13757"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13757",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13757"
},
{
"cve": "CVE-2019-13758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13758"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13758",
"url": "https://www.suse.com/security/cve/CVE-2019-13758"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13758",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13758"
},
{
"cve": "CVE-2019-13759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13759"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13759",
"url": "https://www.suse.com/security/cve/CVE-2019-13759"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13759",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13759"
},
{
"cve": "CVE-2019-13761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13761"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13761",
"url": "https://www.suse.com/security/cve/CVE-2019-13761"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13761",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13761"
},
{
"cve": "CVE-2019-13762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13762"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13762",
"url": "https://www.suse.com/security/cve/CVE-2019-13762"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13762",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13762"
},
{
"cve": "CVE-2019-13763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13763"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13763",
"url": "https://www.suse.com/security/cve/CVE-2019-13763"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13763",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13763"
},
{
"cve": "CVE-2019-13764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13764"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13764",
"url": "https://www.suse.com/security/cve/CVE-2019-13764"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13764",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13764"
},
{
"cve": "CVE-2019-13767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13767"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13767",
"url": "https://www.suse.com/security/cve/CVE-2019-13767"
},
{
"category": "external",
"summary": "SUSE Bug 1159498 for CVE-2019-13767",
"url": "https://bugzilla.suse.com/1159498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13767"
},
{
"cve": "CVE-2019-15903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15903"
}
],
"notes": [
{
"category": "general",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15903",
"url": "https://www.suse.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "SUSE Bug 1149429 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1149429"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1154738"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-15903"
},
{
"cve": "CVE-2019-18197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18197"
}
],
"notes": [
{
"category": "general",
"text": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18197",
"url": "https://www.suse.com/security/cve/CVE-2019-18197"
},
{
"category": "external",
"summary": "SUSE Bug 1154609 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1154609"
},
{
"category": "external",
"summary": "SUSE Bug 1157028 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1157028"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1162833"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1190108 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1190108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-18197"
},
{
"cve": "CVE-2019-19880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19880"
}
],
"notes": [
{
"category": "general",
"text": "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19880",
"url": "https://www.suse.com/security/cve/CVE-2019-19880"
},
{
"category": "external",
"summary": "SUSE Bug 1159491 for CVE-2019-19880",
"url": "https://bugzilla.suse.com/1159491"
},
{
"category": "external",
"summary": "SUSE Bug 1159715 for CVE-2019-19880",
"url": "https://bugzilla.suse.com/1159715"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2019-19880",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-19880"
},
{
"cve": "CVE-2019-19923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19923"
}
],
"notes": [
{
"category": "general",
"text": "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19923",
"url": "https://www.suse.com/security/cve/CVE-2019-19923"
},
{
"category": "external",
"summary": "SUSE Bug 1160309 for CVE-2019-19923",
"url": "https://bugzilla.suse.com/1160309"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2019-19923",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-19923"
},
{
"cve": "CVE-2019-19926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19926"
}
],
"notes": [
{
"category": "general",
"text": "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19926",
"url": "https://www.suse.com/security/cve/CVE-2019-19926"
},
{
"category": "external",
"summary": "SUSE Bug 1159491 for CVE-2019-19926",
"url": "https://bugzilla.suse.com/1159491"
},
{
"category": "external",
"summary": "SUSE Bug 1159715 for CVE-2019-19926",
"url": "https://bugzilla.suse.com/1159715"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2019-19926",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-19926"
},
{
"cve": "CVE-2019-20503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20503"
}
],
"notes": [
{
"category": "general",
"text": "usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20503",
"url": "https://www.suse.com/security/cve/CVE-2019-20503"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2019-20503",
"url": "https://bugzilla.suse.com/1166238"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2019-20503",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-20503"
},
{
"cve": "CVE-2019-5754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5754"
}
],
"notes": [
{
"category": "general",
"text": "Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5754",
"url": "https://www.suse.com/security/cve/CVE-2019-5754"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5754",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5754"
},
{
"cve": "CVE-2019-5755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5755"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5755",
"url": "https://www.suse.com/security/cve/CVE-2019-5755"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5755",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5755"
},
{
"cve": "CVE-2019-5756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5756"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5756",
"url": "https://www.suse.com/security/cve/CVE-2019-5756"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5756",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5756"
},
{
"cve": "CVE-2019-5757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5757"
}
],
"notes": [
{
"category": "general",
"text": "An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5757",
"url": "https://www.suse.com/security/cve/CVE-2019-5757"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5757",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5757"
},
{
"cve": "CVE-2019-5758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5758"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5758",
"url": "https://www.suse.com/security/cve/CVE-2019-5758"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5758",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5758"
},
{
"cve": "CVE-2019-5759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5759"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5759",
"url": "https://www.suse.com/security/cve/CVE-2019-5759"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5759",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5759"
},
{
"cve": "CVE-2019-5760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5760"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5760",
"url": "https://www.suse.com/security/cve/CVE-2019-5760"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5760",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5760"
},
{
"cve": "CVE-2019-5761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5761"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5761",
"url": "https://www.suse.com/security/cve/CVE-2019-5761"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5761",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5761"
},
{
"cve": "CVE-2019-5762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5762"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5762",
"url": "https://www.suse.com/security/cve/CVE-2019-5762"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5762",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5762"
},
{
"cve": "CVE-2019-5763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5763"
}
],
"notes": [
{
"category": "general",
"text": "Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5763",
"url": "https://www.suse.com/security/cve/CVE-2019-5763"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5763",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5763"
},
{
"cve": "CVE-2019-5764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5764"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5764",
"url": "https://www.suse.com/security/cve/CVE-2019-5764"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5764",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5764"
},
{
"cve": "CVE-2019-5765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5765"
}
],
"notes": [
{
"category": "general",
"text": "An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5765",
"url": "https://www.suse.com/security/cve/CVE-2019-5765"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5765",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5765"
},
{
"cve": "CVE-2019-5766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5766"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5766",
"url": "https://www.suse.com/security/cve/CVE-2019-5766"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5766",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5766"
},
{
"cve": "CVE-2019-5767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5767"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5767",
"url": "https://www.suse.com/security/cve/CVE-2019-5767"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5767",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5767"
},
{
"cve": "CVE-2019-5768",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5768"
}
],
"notes": [
{
"category": "general",
"text": "DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5768",
"url": "https://www.suse.com/security/cve/CVE-2019-5768"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5768",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5768"
},
{
"cve": "CVE-2019-5769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5769"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5769",
"url": "https://www.suse.com/security/cve/CVE-2019-5769"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5769",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5769"
},
{
"cve": "CVE-2019-5770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5770"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5770",
"url": "https://www.suse.com/security/cve/CVE-2019-5770"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5770",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5770"
},
{
"cve": "CVE-2019-5771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5771"
}
],
"notes": [
{
"category": "general",
"text": "An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5771",
"url": "https://www.suse.com/security/cve/CVE-2019-5771"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5771",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5771"
},
{
"cve": "CVE-2019-5772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5772"
}
],
"notes": [
{
"category": "general",
"text": "Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5772",
"url": "https://www.suse.com/security/cve/CVE-2019-5772"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5772",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5772"
},
{
"cve": "CVE-2019-5773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5773"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5773",
"url": "https://www.suse.com/security/cve/CVE-2019-5773"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5773",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5773"
},
{
"cve": "CVE-2019-5774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5774"
}
],
"notes": [
{
"category": "general",
"text": "Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5774",
"url": "https://www.suse.com/security/cve/CVE-2019-5774"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5774",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5774"
},
{
"cve": "CVE-2019-5775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5775"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5775",
"url": "https://www.suse.com/security/cve/CVE-2019-5775"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5775",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5775"
},
{
"cve": "CVE-2019-5776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5776"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5776",
"url": "https://www.suse.com/security/cve/CVE-2019-5776"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5776",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5776"
},
{
"cve": "CVE-2019-5777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5777"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5777",
"url": "https://www.suse.com/security/cve/CVE-2019-5777"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5777",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5777"
},
{
"cve": "CVE-2019-5778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5778"
}
],
"notes": [
{
"category": "general",
"text": "A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5778",
"url": "https://www.suse.com/security/cve/CVE-2019-5778"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5778",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5778"
},
{
"cve": "CVE-2019-5779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5779"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5779",
"url": "https://www.suse.com/security/cve/CVE-2019-5779"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5779",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5779"
},
{
"cve": "CVE-2019-5780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5780"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5780",
"url": "https://www.suse.com/security/cve/CVE-2019-5780"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5780",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5780"
},
{
"cve": "CVE-2019-5781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5781"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5781",
"url": "https://www.suse.com/security/cve/CVE-2019-5781"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5781",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5781"
},
{
"cve": "CVE-2019-5782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5782"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5782",
"url": "https://www.suse.com/security/cve/CVE-2019-5782"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5782",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5782"
},
{
"cve": "CVE-2019-5784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5784"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5784",
"url": "https://www.suse.com/security/cve/CVE-2019-5784"
},
{
"category": "external",
"summary": "SUSE Bug 1124936 for CVE-2019-5784",
"url": "https://bugzilla.suse.com/1124936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5784"
},
{
"cve": "CVE-2019-5786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5786"
}
],
"notes": [
{
"category": "general",
"text": "Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5786",
"url": "https://www.suse.com/security/cve/CVE-2019-5786"
},
{
"category": "external",
"summary": "SUSE Bug 1127602 for CVE-2019-5786",
"url": "https://bugzilla.suse.com/1127602"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5786"
},
{
"cve": "CVE-2019-5787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5787"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5787",
"url": "https://www.suse.com/security/cve/CVE-2019-5787"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5787",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5787"
},
{
"cve": "CVE-2019-5788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5788"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5788",
"url": "https://www.suse.com/security/cve/CVE-2019-5788"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5788",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5788"
},
{
"cve": "CVE-2019-5789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5789"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5789",
"url": "https://www.suse.com/security/cve/CVE-2019-5789"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5789",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5789"
},
{
"cve": "CVE-2019-5790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5790"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5790",
"url": "https://www.suse.com/security/cve/CVE-2019-5790"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5790",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5790"
},
{
"cve": "CVE-2019-5791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5791"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5791",
"url": "https://www.suse.com/security/cve/CVE-2019-5791"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5791",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5791"
},
{
"cve": "CVE-2019-5792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5792"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5792",
"url": "https://www.suse.com/security/cve/CVE-2019-5792"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5792",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5792"
},
{
"cve": "CVE-2019-5793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5793"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5793",
"url": "https://www.suse.com/security/cve/CVE-2019-5793"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5793",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5793"
},
{
"cve": "CVE-2019-5794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5794"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5794",
"url": "https://www.suse.com/security/cve/CVE-2019-5794"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5794",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5794"
},
{
"cve": "CVE-2019-5795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5795"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5795",
"url": "https://www.suse.com/security/cve/CVE-2019-5795"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5795",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5795"
},
{
"cve": "CVE-2019-5796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5796"
}
],
"notes": [
{
"category": "general",
"text": "Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5796",
"url": "https://www.suse.com/security/cve/CVE-2019-5796"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5796",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5796"
},
{
"cve": "CVE-2019-5797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5797"
}
],
"notes": [
{
"category": "general",
"text": "Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5797",
"url": "https://www.suse.com/security/cve/CVE-2019-5797"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5797",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5797"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-5799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5799"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect inheritance of a new document\u0027s policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5799",
"url": "https://www.suse.com/security/cve/CVE-2019-5799"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5799",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5799"
},
{
"cve": "CVE-2019-5800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5800"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5800",
"url": "https://www.suse.com/security/cve/CVE-2019-5800"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5800",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5800"
},
{
"cve": "CVE-2019-5801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5801"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5801",
"url": "https://www.suse.com/security/cve/CVE-2019-5801"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5801",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5801"
},
{
"cve": "CVE-2019-5802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5802"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5802",
"url": "https://www.suse.com/security/cve/CVE-2019-5802"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5802",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5802"
},
{
"cve": "CVE-2019-5803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5803"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5803",
"url": "https://www.suse.com/security/cve/CVE-2019-5803"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5803",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5803"
},
{
"cve": "CVE-2019-5804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5804"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5804",
"url": "https://www.suse.com/security/cve/CVE-2019-5804"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5804",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5804"
},
{
"cve": "CVE-2019-5805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5805"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5805",
"url": "https://www.suse.com/security/cve/CVE-2019-5805"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5805",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5805"
},
{
"cve": "CVE-2019-5806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5806"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5806",
"url": "https://www.suse.com/security/cve/CVE-2019-5806"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5806",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5806"
},
{
"cve": "CVE-2019-5807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5807"
}
],
"notes": [
{
"category": "general",
"text": "Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5807",
"url": "https://www.suse.com/security/cve/CVE-2019-5807"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5807",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5807"
},
{
"cve": "CVE-2019-5808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5808"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5808",
"url": "https://www.suse.com/security/cve/CVE-2019-5808"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5808",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5808"
},
{
"cve": "CVE-2019-5809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5809"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5809",
"url": "https://www.suse.com/security/cve/CVE-2019-5809"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5809",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5809"
},
{
"cve": "CVE-2019-5810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5810"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5810",
"url": "https://www.suse.com/security/cve/CVE-2019-5810"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5810",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5810"
},
{
"cve": "CVE-2019-5811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5811"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5811",
"url": "https://www.suse.com/security/cve/CVE-2019-5811"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5811",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5811"
},
{
"cve": "CVE-2019-5812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5812"
}
],
"notes": [
{
"category": "general",
"text": "Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5812",
"url": "https://www.suse.com/security/cve/CVE-2019-5812"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5812",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5812"
},
{
"cve": "CVE-2019-5813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5813"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5813",
"url": "https://www.suse.com/security/cve/CVE-2019-5813"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5813",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5813"
},
{
"cve": "CVE-2019-5814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5814"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5814",
"url": "https://www.suse.com/security/cve/CVE-2019-5814"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5814",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5814"
},
{
"cve": "CVE-2019-5815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5815"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5815",
"url": "https://www.suse.com/security/cve/CVE-2019-5815"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5815",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5815"
},
{
"cve": "CVE-2019-5816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5816"
}
],
"notes": [
{
"category": "general",
"text": "Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5816",
"url": "https://www.suse.com/security/cve/CVE-2019-5816"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5816",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5816"
},
{
"cve": "CVE-2019-5817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5817"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5817",
"url": "https://www.suse.com/security/cve/CVE-2019-5817"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5817",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5817"
},
{
"cve": "CVE-2019-5818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5818"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5818",
"url": "https://www.suse.com/security/cve/CVE-2019-5818"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5818",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5818"
},
{
"cve": "CVE-2019-5819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5819"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to clipboard.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5819",
"url": "https://www.suse.com/security/cve/CVE-2019-5819"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5819",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5819"
},
{
"cve": "CVE-2019-5820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5820"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5820",
"url": "https://www.suse.com/security/cve/CVE-2019-5820"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5820",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5820"
},
{
"cve": "CVE-2019-5821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5821"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5821",
"url": "https://www.suse.com/security/cve/CVE-2019-5821"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5821",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5821"
},
{
"cve": "CVE-2019-5822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5822"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5822",
"url": "https://www.suse.com/security/cve/CVE-2019-5822"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5822",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5822"
},
{
"cve": "CVE-2019-5823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5823"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5823",
"url": "https://www.suse.com/security/cve/CVE-2019-5823"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5823",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5823"
},
{
"cve": "CVE-2019-5824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5824"
}
],
"notes": [
{
"category": "general",
"text": "Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5824",
"url": "https://www.suse.com/security/cve/CVE-2019-5824"
},
{
"category": "external",
"summary": "SUSE Bug 1134218 for CVE-2019-5824",
"url": "https://bugzilla.suse.com/1134218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5824"
},
{
"cve": "CVE-2019-5827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5827"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5827",
"url": "https://www.suse.com/security/cve/CVE-2019-5827"
},
{
"category": "external",
"summary": "SUSE Bug 1134218 for CVE-2019-5827",
"url": "https://bugzilla.suse.com/1134218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5827"
},
{
"cve": "CVE-2019-5828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5828"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5828",
"url": "https://www.suse.com/security/cve/CVE-2019-5828"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5828",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5828"
},
{
"cve": "CVE-2019-5829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5829"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5829",
"url": "https://www.suse.com/security/cve/CVE-2019-5829"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5829",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5829"
},
{
"cve": "CVE-2019-5830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5830"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5830",
"url": "https://www.suse.com/security/cve/CVE-2019-5830"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5830",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5830"
},
{
"cve": "CVE-2019-5831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5831"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5831",
"url": "https://www.suse.com/security/cve/CVE-2019-5831"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5831",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5831"
},
{
"cve": "CVE-2019-5832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5832"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5832",
"url": "https://www.suse.com/security/cve/CVE-2019-5832"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5832",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5832"
},
{
"cve": "CVE-2019-5833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5833"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5833",
"url": "https://www.suse.com/security/cve/CVE-2019-5833"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5833",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5833"
},
{
"cve": "CVE-2019-5834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5834"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5834",
"url": "https://www.suse.com/security/cve/CVE-2019-5834"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5834",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5834"
},
{
"cve": "CVE-2019-5835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5835"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5835",
"url": "https://www.suse.com/security/cve/CVE-2019-5835"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5835",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5835"
},
{
"cve": "CVE-2019-5836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5836"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5836",
"url": "https://www.suse.com/security/cve/CVE-2019-5836"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5836",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5836"
},
{
"cve": "CVE-2019-5837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5837"
}
],
"notes": [
{
"category": "general",
"text": "Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5837",
"url": "https://www.suse.com/security/cve/CVE-2019-5837"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5837",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5837"
},
{
"cve": "CVE-2019-5838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5838"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5838",
"url": "https://www.suse.com/security/cve/CVE-2019-5838"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5838",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5838"
},
{
"cve": "CVE-2019-5839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5839"
}
],
"notes": [
{
"category": "general",
"text": "Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5839",
"url": "https://www.suse.com/security/cve/CVE-2019-5839"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5839",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5839"
},
{
"cve": "CVE-2019-5840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5840"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5840",
"url": "https://www.suse.com/security/cve/CVE-2019-5840"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5840",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5840"
},
{
"cve": "CVE-2019-5842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5842"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5842",
"url": "https://www.suse.com/security/cve/CVE-2019-5842"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5842",
"url": "https://bugzilla.suse.com/1137332"
},
{
"category": "external",
"summary": "SUSE Bug 1138287 for CVE-2019-5842",
"url": "https://bugzilla.suse.com/1138287"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5842"
},
{
"cve": "CVE-2019-5844",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5844"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5844",
"url": "https://www.suse.com/security/cve/CVE-2019-5844"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5844",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5844"
},
{
"cve": "CVE-2019-5847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5847"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5847",
"url": "https://www.suse.com/security/cve/CVE-2019-5847"
},
{
"category": "external",
"summary": "SUSE Bug 1141649 for CVE-2019-5847",
"url": "https://bugzilla.suse.com/1141649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5847"
},
{
"cve": "CVE-2019-5848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5848"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5848",
"url": "https://www.suse.com/security/cve/CVE-2019-5848"
},
{
"category": "external",
"summary": "SUSE Bug 1141649 for CVE-2019-5848",
"url": "https://bugzilla.suse.com/1141649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5848"
},
{
"cve": "CVE-2019-5850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5850"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5850",
"url": "https://www.suse.com/security/cve/CVE-2019-5850"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5850",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5850"
},
{
"cve": "CVE-2019-5851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5851"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5851",
"url": "https://www.suse.com/security/cve/CVE-2019-5851"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5851",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5851"
},
{
"cve": "CVE-2019-5852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5852"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5852",
"url": "https://www.suse.com/security/cve/CVE-2019-5852"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5852",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5852"
},
{
"cve": "CVE-2019-5853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5853"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5853",
"url": "https://www.suse.com/security/cve/CVE-2019-5853"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5853",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5853"
},
{
"cve": "CVE-2019-5854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5854"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5854",
"url": "https://www.suse.com/security/cve/CVE-2019-5854"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5854",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5854"
},
{
"cve": "CVE-2019-5855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5855"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5855",
"url": "https://www.suse.com/security/cve/CVE-2019-5855"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5855",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5855"
},
{
"cve": "CVE-2019-5856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5856"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5856",
"url": "https://www.suse.com/security/cve/CVE-2019-5856"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5856",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5856"
},
{
"cve": "CVE-2019-5857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5857"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5857",
"url": "https://www.suse.com/security/cve/CVE-2019-5857"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5857",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5857"
},
{
"cve": "CVE-2019-5858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5858"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5858",
"url": "https://www.suse.com/security/cve/CVE-2019-5858"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5858",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5858"
},
{
"cve": "CVE-2019-5859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5859"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5859",
"url": "https://www.suse.com/security/cve/CVE-2019-5859"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5859",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5859"
},
{
"cve": "CVE-2019-5860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5860"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5860",
"url": "https://www.suse.com/security/cve/CVE-2019-5860"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5860",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5860"
},
{
"cve": "CVE-2019-5861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5861"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5861",
"url": "https://www.suse.com/security/cve/CVE-2019-5861"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5861",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5861"
},
{
"cve": "CVE-2019-5862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5862"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5862",
"url": "https://www.suse.com/security/cve/CVE-2019-5862"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5862",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5862"
},
{
"cve": "CVE-2019-5863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5863"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5863",
"url": "https://www.suse.com/security/cve/CVE-2019-5863"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5863",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5863"
},
{
"cve": "CVE-2019-5864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5864"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5864",
"url": "https://www.suse.com/security/cve/CVE-2019-5864"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5864",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5864"
},
{
"cve": "CVE-2019-5865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5865"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5865",
"url": "https://www.suse.com/security/cve/CVE-2019-5865"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5865",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5865"
},
{
"cve": "CVE-2019-5867",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5867"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5867",
"url": "https://www.suse.com/security/cve/CVE-2019-5867"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5867",
"url": "https://bugzilla.suse.com/1143492"
},
{
"category": "external",
"summary": "SUSE Bug 1145242 for CVE-2019-5867",
"url": "https://bugzilla.suse.com/1145242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5867"
},
{
"cve": "CVE-2019-5868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5868"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5868",
"url": "https://www.suse.com/security/cve/CVE-2019-5868"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5868",
"url": "https://bugzilla.suse.com/1143492"
},
{
"category": "external",
"summary": "SUSE Bug 1145242 for CVE-2019-5868",
"url": "https://bugzilla.suse.com/1145242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5868"
},
{
"cve": "CVE-2019-5869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5869"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 76.0.3809.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5869",
"url": "https://www.suse.com/security/cve/CVE-2019-5869"
},
{
"category": "external",
"summary": "SUSE Bug 1149143 for CVE-2019-5869",
"url": "https://bugzilla.suse.com/1149143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5869"
},
{
"cve": "CVE-2019-5870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5870"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5870",
"url": "https://www.suse.com/security/cve/CVE-2019-5870"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5870",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5870"
},
{
"cve": "CVE-2019-5871",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5871"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5871",
"url": "https://www.suse.com/security/cve/CVE-2019-5871"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5871",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5871"
},
{
"cve": "CVE-2019-5872",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5872"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5872",
"url": "https://www.suse.com/security/cve/CVE-2019-5872"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5872",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5872"
},
{
"cve": "CVE-2019-5874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5874"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5874",
"url": "https://www.suse.com/security/cve/CVE-2019-5874"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5874",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5874"
},
{
"cve": "CVE-2019-5875",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5875"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5875",
"url": "https://www.suse.com/security/cve/CVE-2019-5875"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5875",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5875"
},
{
"cve": "CVE-2019-5876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5876"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5876",
"url": "https://www.suse.com/security/cve/CVE-2019-5876"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5876",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5876"
},
{
"cve": "CVE-2019-5877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5877"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5877",
"url": "https://www.suse.com/security/cve/CVE-2019-5877"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5877",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5877"
},
{
"cve": "CVE-2019-5878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5878"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5878",
"url": "https://www.suse.com/security/cve/CVE-2019-5878"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5878",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5878"
},
{
"cve": "CVE-2019-5879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5879"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5879",
"url": "https://www.suse.com/security/cve/CVE-2019-5879"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5879",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5879"
},
{
"cve": "CVE-2019-5880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5880"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5880",
"url": "https://www.suse.com/security/cve/CVE-2019-5880"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5880",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5880"
},
{
"cve": "CVE-2019-5881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5881"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in SwiftShader in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5881",
"url": "https://www.suse.com/security/cve/CVE-2019-5881"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5881",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5881"
},
{
"cve": "CVE-2019-8075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-8075"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-8075",
"url": "https://www.suse.com/security/cve/CVE-2019-8075"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2019-8075",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-8075"
},
{
"cve": "CVE-2020-0561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-0561"
}
],
"notes": [
{
"category": "general",
"text": "Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-0561",
"url": "https://www.suse.com/security/cve/CVE-2020-0561"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-0561"
},
{
"cve": "CVE-2020-15959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15959"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15959",
"url": "https://www.suse.com/security/cve/CVE-2020-15959"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-15959",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15959"
},
{
"cve": "CVE-2020-15960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15960"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15960",
"url": "https://www.suse.com/security/cve/CVE-2020-15960"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15960",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15960",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15960"
},
{
"cve": "CVE-2020-15961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15961"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15961",
"url": "https://www.suse.com/security/cve/CVE-2020-15961"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15961",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15961",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15961"
},
{
"cve": "CVE-2020-15962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15962"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15962",
"url": "https://www.suse.com/security/cve/CVE-2020-15962"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15962",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15962",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15962"
},
{
"cve": "CVE-2020-15963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15963"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15963",
"url": "https://www.suse.com/security/cve/CVE-2020-15963"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15963",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15963",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15963"
},
{
"cve": "CVE-2020-15964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15964"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15964",
"url": "https://www.suse.com/security/cve/CVE-2020-15964"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15964",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15964",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15964"
},
{
"cve": "CVE-2020-15965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15965"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15965",
"url": "https://www.suse.com/security/cve/CVE-2020-15965"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15965",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15965",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15965"
},
{
"cve": "CVE-2020-15966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15966"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15966",
"url": "https://www.suse.com/security/cve/CVE-2020-15966"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15966",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15966",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15966"
},
{
"cve": "CVE-2020-15967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15967"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15967",
"url": "https://www.suse.com/security/cve/CVE-2020-15967"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15967",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15967"
},
{
"cve": "CVE-2020-15968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15968"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15968",
"url": "https://www.suse.com/security/cve/CVE-2020-15968"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15968",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15968"
},
{
"cve": "CVE-2020-15969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15969"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15969",
"url": "https://www.suse.com/security/cve/CVE-2020-15969"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177408"
},
{
"category": "external",
"summary": "SUSE Bug 1177872 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177872"
},
{
"category": "external",
"summary": "SUSE Bug 1177977 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15969"
},
{
"cve": "CVE-2020-15970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15970"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15970",
"url": "https://www.suse.com/security/cve/CVE-2020-15970"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15970",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15970"
},
{
"cve": "CVE-2020-15971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15971"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15971",
"url": "https://www.suse.com/security/cve/CVE-2020-15971"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15971",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15971"
},
{
"cve": "CVE-2020-15972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15972"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15972",
"url": "https://www.suse.com/security/cve/CVE-2020-15972"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15972",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15972"
},
{
"cve": "CVE-2020-15973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15973"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15973",
"url": "https://www.suse.com/security/cve/CVE-2020-15973"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15973",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15973"
},
{
"cve": "CVE-2020-15974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15974"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15974",
"url": "https://www.suse.com/security/cve/CVE-2020-15974"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15974",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15974"
},
{
"cve": "CVE-2020-15975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15975"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15975",
"url": "https://www.suse.com/security/cve/CVE-2020-15975"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15975",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15975"
},
{
"cve": "CVE-2020-15976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15976"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15976",
"url": "https://www.suse.com/security/cve/CVE-2020-15976"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15976",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15976"
},
{
"cve": "CVE-2020-15977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15977"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15977",
"url": "https://www.suse.com/security/cve/CVE-2020-15977"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15977",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15977"
},
{
"cve": "CVE-2020-15978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15978"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15978",
"url": "https://www.suse.com/security/cve/CVE-2020-15978"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15978",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15978"
},
{
"cve": "CVE-2020-15979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15979"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15979",
"url": "https://www.suse.com/security/cve/CVE-2020-15979"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15979",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15979"
},
{
"cve": "CVE-2020-15980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15980"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15980",
"url": "https://www.suse.com/security/cve/CVE-2020-15980"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15980",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15980"
},
{
"cve": "CVE-2020-15981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15981"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15981",
"url": "https://www.suse.com/security/cve/CVE-2020-15981"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15981",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15981"
},
{
"cve": "CVE-2020-15982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15982"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15982",
"url": "https://www.suse.com/security/cve/CVE-2020-15982"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15982",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15982"
},
{
"cve": "CVE-2020-15983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15983"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15983",
"url": "https://www.suse.com/security/cve/CVE-2020-15983"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15983",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15983"
},
{
"cve": "CVE-2020-15984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15984"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15984",
"url": "https://www.suse.com/security/cve/CVE-2020-15984"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15984",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15984"
},
{
"cve": "CVE-2020-15985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15985"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15985",
"url": "https://www.suse.com/security/cve/CVE-2020-15985"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15985",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15985"
},
{
"cve": "CVE-2020-15986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15986"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15986",
"url": "https://www.suse.com/security/cve/CVE-2020-15986"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15986",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15986"
},
{
"cve": "CVE-2020-15987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15987"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15987",
"url": "https://www.suse.com/security/cve/CVE-2020-15987"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15987",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15987"
},
{
"cve": "CVE-2020-15988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15988"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15988",
"url": "https://www.suse.com/security/cve/CVE-2020-15988"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15988",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15988"
},
{
"cve": "CVE-2020-15989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15989"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15989",
"url": "https://www.suse.com/security/cve/CVE-2020-15989"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15989",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15989"
},
{
"cve": "CVE-2020-15990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15990"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15990",
"url": "https://www.suse.com/security/cve/CVE-2020-15990"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15990",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15990"
},
{
"cve": "CVE-2020-15991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15991"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15991",
"url": "https://www.suse.com/security/cve/CVE-2020-15991"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15991",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15991"
},
{
"cve": "CVE-2020-15992",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15992"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15992",
"url": "https://www.suse.com/security/cve/CVE-2020-15992"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15992",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15992"
},
{
"cve": "CVE-2020-15995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15995"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15995",
"url": "https://www.suse.com/security/cve/CVE-2020-15995"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2020-15995",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15995"
},
{
"cve": "CVE-2020-15999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15999"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15999",
"url": "https://www.suse.com/security/cve/CVE-2020-15999"
},
{
"category": "external",
"summary": "SUSE Bug 1177914 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1177914"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1177936"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15999"
},
{
"cve": "CVE-2020-16000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16000"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16000",
"url": "https://www.suse.com/security/cve/CVE-2020-16000"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-16000",
"url": "https://bugzilla.suse.com/1177936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16000"
},
{
"cve": "CVE-2020-16001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16001"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16001",
"url": "https://www.suse.com/security/cve/CVE-2020-16001"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-16001",
"url": "https://bugzilla.suse.com/1177936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16001"
},
{
"cve": "CVE-2020-16002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16002"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16002",
"url": "https://www.suse.com/security/cve/CVE-2020-16002"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-16002",
"url": "https://bugzilla.suse.com/1177936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16002"
},
{
"cve": "CVE-2020-16003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16003"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16003",
"url": "https://www.suse.com/security/cve/CVE-2020-16003"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-16003",
"url": "https://bugzilla.suse.com/1177936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16003"
},
{
"cve": "CVE-2020-16004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16004"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16004",
"url": "https://www.suse.com/security/cve/CVE-2020-16004"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16004",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16004"
},
{
"cve": "CVE-2020-16005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16005"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16005",
"url": "https://www.suse.com/security/cve/CVE-2020-16005"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16005",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16005"
},
{
"cve": "CVE-2020-16006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16006"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16006",
"url": "https://www.suse.com/security/cve/CVE-2020-16006"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16006",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16006"
},
{
"cve": "CVE-2020-16007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16007"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16007",
"url": "https://www.suse.com/security/cve/CVE-2020-16007"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16007",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16007"
},
{
"cve": "CVE-2020-16008",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16008"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16008",
"url": "https://www.suse.com/security/cve/CVE-2020-16008"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16008",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16008"
},
{
"cve": "CVE-2020-16009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16009"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16009",
"url": "https://www.suse.com/security/cve/CVE-2020-16009"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16009",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16009"
},
{
"cve": "CVE-2020-16011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16011"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16011",
"url": "https://www.suse.com/security/cve/CVE-2020-16011"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16011",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16011"
},
{
"cve": "CVE-2020-16012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16012"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16012",
"url": "https://www.suse.com/security/cve/CVE-2020-16012"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178894"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16012"
},
{
"cve": "CVE-2020-16013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16013"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16013",
"url": "https://www.suse.com/security/cve/CVE-2020-16013"
},
{
"category": "external",
"summary": "SUSE Bug 1178703 for CVE-2020-16013",
"url": "https://bugzilla.suse.com/1178703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16013"
},
{
"cve": "CVE-2020-16014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16014"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16014",
"url": "https://www.suse.com/security/cve/CVE-2020-16014"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16014",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16014"
},
{
"cve": "CVE-2020-16015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16015"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16015",
"url": "https://www.suse.com/security/cve/CVE-2020-16015"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16015",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16015"
},
{
"cve": "CVE-2020-16016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16016"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16016",
"url": "https://www.suse.com/security/cve/CVE-2020-16016"
},
{
"category": "external",
"summary": "SUSE Bug 1178630 for CVE-2020-16016",
"url": "https://bugzilla.suse.com/1178630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16016"
},
{
"cve": "CVE-2020-16017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16017"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16017",
"url": "https://www.suse.com/security/cve/CVE-2020-16017"
},
{
"category": "external",
"summary": "SUSE Bug 1178703 for CVE-2020-16017",
"url": "https://bugzilla.suse.com/1178703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16017"
},
{
"cve": "CVE-2020-16018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16018"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16018",
"url": "https://www.suse.com/security/cve/CVE-2020-16018"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16018",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16018"
},
{
"cve": "CVE-2020-16019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16019"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16019",
"url": "https://www.suse.com/security/cve/CVE-2020-16019"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16019",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16019"
},
{
"cve": "CVE-2020-16020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16020"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16020",
"url": "https://www.suse.com/security/cve/CVE-2020-16020"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16020",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16020"
},
{
"cve": "CVE-2020-16021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16021"
}
],
"notes": [
{
"category": "general",
"text": "Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16021",
"url": "https://www.suse.com/security/cve/CVE-2020-16021"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16021",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16021"
},
{
"cve": "CVE-2020-16022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16022"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16022",
"url": "https://www.suse.com/security/cve/CVE-2020-16022"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16022",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16022"
},
{
"cve": "CVE-2020-16023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16023"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16023",
"url": "https://www.suse.com/security/cve/CVE-2020-16023"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16023",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16023"
},
{
"cve": "CVE-2020-16024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16024"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16024",
"url": "https://www.suse.com/security/cve/CVE-2020-16024"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16024",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16024"
},
{
"cve": "CVE-2020-16025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16025"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16025",
"url": "https://www.suse.com/security/cve/CVE-2020-16025"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16025",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16025"
},
{
"cve": "CVE-2020-16026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16026"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16026",
"url": "https://www.suse.com/security/cve/CVE-2020-16026"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16026",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16026"
},
{
"cve": "CVE-2020-16027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16027"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user\u0027s disk via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16027",
"url": "https://www.suse.com/security/cve/CVE-2020-16027"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16027",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16027"
},
{
"cve": "CVE-2020-16028",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16028"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16028",
"url": "https://www.suse.com/security/cve/CVE-2020-16028"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16028",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16028"
},
{
"cve": "CVE-2020-16029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16029"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16029",
"url": "https://www.suse.com/security/cve/CVE-2020-16029"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16029",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16029"
},
{
"cve": "CVE-2020-16030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16030"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16030",
"url": "https://www.suse.com/security/cve/CVE-2020-16030"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16030",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16030"
},
{
"cve": "CVE-2020-16031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16031"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16031",
"url": "https://www.suse.com/security/cve/CVE-2020-16031"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16031",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16031"
},
{
"cve": "CVE-2020-16032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16032"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16032",
"url": "https://www.suse.com/security/cve/CVE-2020-16032"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16032",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16032"
},
{
"cve": "CVE-2020-16033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16033"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16033",
"url": "https://www.suse.com/security/cve/CVE-2020-16033"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16033",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16033"
},
{
"cve": "CVE-2020-16034",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16034"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass policy restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16034",
"url": "https://www.suse.com/security/cve/CVE-2020-16034"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16034",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16034"
},
{
"cve": "CVE-2020-16035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16035"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16035",
"url": "https://www.suse.com/security/cve/CVE-2020-16035"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16035",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16035"
},
{
"cve": "CVE-2020-16036",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16036"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass cookie restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16036",
"url": "https://www.suse.com/security/cve/CVE-2020-16036"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16036",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16036"
},
{
"cve": "CVE-2020-16037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16037"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16037",
"url": "https://www.suse.com/security/cve/CVE-2020-16037"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16037",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16037"
},
{
"cve": "CVE-2020-16038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16038"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16038",
"url": "https://www.suse.com/security/cve/CVE-2020-16038"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16038",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16038"
},
{
"cve": "CVE-2020-16039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16039"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16039",
"url": "https://www.suse.com/security/cve/CVE-2020-16039"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16039",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16039"
},
{
"cve": "CVE-2020-16040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16040"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16040",
"url": "https://www.suse.com/security/cve/CVE-2020-16040"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16040",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16040"
},
{
"cve": "CVE-2020-16041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16041"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16041",
"url": "https://www.suse.com/security/cve/CVE-2020-16041"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16041",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16041"
},
{
"cve": "CVE-2020-16042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16042"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16042",
"url": "https://www.suse.com/security/cve/CVE-2020-16042"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16042",
"url": "https://bugzilla.suse.com/1179576"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-16042",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16042"
},
{
"cve": "CVE-2020-16043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16043"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16043",
"url": "https://www.suse.com/security/cve/CVE-2020-16043"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2020-16043",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-16043"
},
{
"cve": "CVE-2020-16044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16044"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16044",
"url": "https://www.suse.com/security/cve/CVE-2020-16044"
},
{
"category": "external",
"summary": "SUSE Bug 1180623 for CVE-2020-16044",
"url": "https://bugzilla.suse.com/1180623"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2020-16044",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16044"
},
{
"cve": "CVE-2020-27844",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-27844"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in openjpeg\u0027s src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-27844",
"url": "https://www.suse.com/security/cve/CVE-2020-27844"
},
{
"category": "external",
"summary": "SUSE Bug 1180045 for CVE-2020-27844",
"url": "https://bugzilla.suse.com/1180045"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2020-27844",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2020-27844",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-27844"
},
{
"cve": "CVE-2020-6377",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6377"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6377",
"url": "https://www.suse.com/security/cve/CVE-2020-6377"
},
{
"category": "external",
"summary": "SUSE Bug 1160337 for CVE-2020-6377",
"url": "https://bugzilla.suse.com/1160337"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6377"
},
{
"cve": "CVE-2020-6378",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6378"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6378",
"url": "https://www.suse.com/security/cve/CVE-2020-6378"
},
{
"category": "external",
"summary": "SUSE Bug 1161252 for CVE-2020-6378",
"url": "https://bugzilla.suse.com/1161252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6378"
},
{
"cve": "CVE-2020-6379",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6379"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6379",
"url": "https://www.suse.com/security/cve/CVE-2020-6379"
},
{
"category": "external",
"summary": "SUSE Bug 1161252 for CVE-2020-6379",
"url": "https://bugzilla.suse.com/1161252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6379"
},
{
"cve": "CVE-2020-6380",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6380"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6380",
"url": "https://www.suse.com/security/cve/CVE-2020-6380"
},
{
"category": "external",
"summary": "SUSE Bug 1161252 for CVE-2020-6380",
"url": "https://bugzilla.suse.com/1161252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6380"
},
{
"cve": "CVE-2020-6381",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6381"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6381",
"url": "https://www.suse.com/security/cve/CVE-2020-6381"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6381",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6381"
},
{
"cve": "CVE-2020-6382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6382"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6382",
"url": "https://www.suse.com/security/cve/CVE-2020-6382"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6382",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6382"
},
{
"cve": "CVE-2020-6385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6385"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6385",
"url": "https://www.suse.com/security/cve/CVE-2020-6385"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6385",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6385"
},
{
"cve": "CVE-2020-6387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6387"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6387",
"url": "https://www.suse.com/security/cve/CVE-2020-6387"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6387",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6387"
},
{
"cve": "CVE-2020-6388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6388"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6388",
"url": "https://www.suse.com/security/cve/CVE-2020-6388"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6388",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6388"
},
{
"cve": "CVE-2020-6389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6389"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6389",
"url": "https://www.suse.com/security/cve/CVE-2020-6389"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6389",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6389"
},
{
"cve": "CVE-2020-6390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6390"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6390",
"url": "https://www.suse.com/security/cve/CVE-2020-6390"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6390",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6390"
},
{
"cve": "CVE-2020-6391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6391"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6391",
"url": "https://www.suse.com/security/cve/CVE-2020-6391"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6391",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6391"
},
{
"cve": "CVE-2020-6392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6392"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6392",
"url": "https://www.suse.com/security/cve/CVE-2020-6392"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6392",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6392"
},
{
"cve": "CVE-2020-6393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6393"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6393",
"url": "https://www.suse.com/security/cve/CVE-2020-6393"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6393",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6393"
},
{
"cve": "CVE-2020-6394",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6394"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6394",
"url": "https://www.suse.com/security/cve/CVE-2020-6394"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6394",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6394"
},
{
"cve": "CVE-2020-6395",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6395"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6395",
"url": "https://www.suse.com/security/cve/CVE-2020-6395"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6395",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6395"
},
{
"cve": "CVE-2020-6396",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6396"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6396",
"url": "https://www.suse.com/security/cve/CVE-2020-6396"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6396",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6396"
},
{
"cve": "CVE-2020-6397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6397"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6397",
"url": "https://www.suse.com/security/cve/CVE-2020-6397"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6397",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6397"
},
{
"cve": "CVE-2020-6398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6398"
}
],
"notes": [
{
"category": "general",
"text": "Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6398",
"url": "https://www.suse.com/security/cve/CVE-2020-6398"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6398",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6398"
},
{
"cve": "CVE-2020-6399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6399"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6399",
"url": "https://www.suse.com/security/cve/CVE-2020-6399"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6399",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6399"
},
{
"cve": "CVE-2020-6400",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6400"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6400",
"url": "https://www.suse.com/security/cve/CVE-2020-6400"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6400",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6400"
},
{
"cve": "CVE-2020-6401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6401"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6401",
"url": "https://www.suse.com/security/cve/CVE-2020-6401"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6401",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6401"
},
{
"cve": "CVE-2020-6402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6402"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6402",
"url": "https://www.suse.com/security/cve/CVE-2020-6402"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6402",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6402"
},
{
"cve": "CVE-2020-6403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6403"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6403",
"url": "https://www.suse.com/security/cve/CVE-2020-6403"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6403",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6403"
},
{
"cve": "CVE-2020-6404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6404"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6404",
"url": "https://www.suse.com/security/cve/CVE-2020-6404"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6404",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6404"
},
{
"cve": "CVE-2020-6405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6405"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6405",
"url": "https://www.suse.com/security/cve/CVE-2020-6405"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6405",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6405"
},
{
"cve": "CVE-2020-6406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6406"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6406",
"url": "https://www.suse.com/security/cve/CVE-2020-6406"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6406",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6406"
},
{
"cve": "CVE-2020-6407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6407"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6407",
"url": "https://www.suse.com/security/cve/CVE-2020-6407"
},
{
"category": "external",
"summary": "SUSE Bug 1164828 for CVE-2020-6407",
"url": "https://bugzilla.suse.com/1164828"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6407"
},
{
"cve": "CVE-2020-6408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6408"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6408",
"url": "https://www.suse.com/security/cve/CVE-2020-6408"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6408",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6408"
},
{
"cve": "CVE-2020-6409",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6409"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6409",
"url": "https://www.suse.com/security/cve/CVE-2020-6409"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6409",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6409"
},
{
"cve": "CVE-2020-6410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6410"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6410",
"url": "https://www.suse.com/security/cve/CVE-2020-6410"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6410",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6410"
},
{
"cve": "CVE-2020-6411",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6411"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6411",
"url": "https://www.suse.com/security/cve/CVE-2020-6411"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6411",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6411"
},
{
"cve": "CVE-2020-6412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6412"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6412",
"url": "https://www.suse.com/security/cve/CVE-2020-6412"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6412",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6412"
},
{
"cve": "CVE-2020-6413",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6413"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6413",
"url": "https://www.suse.com/security/cve/CVE-2020-6413"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6413",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6413"
},
{
"cve": "CVE-2020-6414",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6414"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6414",
"url": "https://www.suse.com/security/cve/CVE-2020-6414"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6414",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6414"
},
{
"cve": "CVE-2020-6415",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6415"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6415",
"url": "https://www.suse.com/security/cve/CVE-2020-6415"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6415",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6415"
},
{
"cve": "CVE-2020-6416",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6416"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6416",
"url": "https://www.suse.com/security/cve/CVE-2020-6416"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6416",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6416"
},
{
"cve": "CVE-2020-6417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6417"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6417",
"url": "https://www.suse.com/security/cve/CVE-2020-6417"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6417",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6417"
},
{
"cve": "CVE-2020-6418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6418"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6418",
"url": "https://www.suse.com/security/cve/CVE-2020-6418"
},
{
"category": "external",
"summary": "SUSE Bug 1164828 for CVE-2020-6418",
"url": "https://bugzilla.suse.com/1164828"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6418"
},
{
"cve": "CVE-2020-6420",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6420"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6420",
"url": "https://www.suse.com/security/cve/CVE-2020-6420"
},
{
"category": "external",
"summary": "SUSE Bug 1165826 for CVE-2020-6420",
"url": "https://bugzilla.suse.com/1165826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6420"
},
{
"cve": "CVE-2020-6422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6422"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6422",
"url": "https://www.suse.com/security/cve/CVE-2020-6422"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6422",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6422"
},
{
"cve": "CVE-2020-6423",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6423"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6423",
"url": "https://www.suse.com/security/cve/CVE-2020-6423"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6423",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6423"
},
{
"cve": "CVE-2020-6424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6424"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6424",
"url": "https://www.suse.com/security/cve/CVE-2020-6424"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6424",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6424"
},
{
"cve": "CVE-2020-6425",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6425"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6425",
"url": "https://www.suse.com/security/cve/CVE-2020-6425"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6425",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6425"
},
{
"cve": "CVE-2020-6426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6426"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6426",
"url": "https://www.suse.com/security/cve/CVE-2020-6426"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6426",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6426"
},
{
"cve": "CVE-2020-6427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6427"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6427",
"url": "https://www.suse.com/security/cve/CVE-2020-6427"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6427",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6427"
},
{
"cve": "CVE-2020-6428",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6428"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6428",
"url": "https://www.suse.com/security/cve/CVE-2020-6428"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6428",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6428"
},
{
"cve": "CVE-2020-6429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6429"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6429",
"url": "https://www.suse.com/security/cve/CVE-2020-6429"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6429",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6429"
},
{
"cve": "CVE-2020-6430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6430"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6430",
"url": "https://www.suse.com/security/cve/CVE-2020-6430"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6430",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6430"
},
{
"cve": "CVE-2020-6431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6431"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6431",
"url": "https://www.suse.com/security/cve/CVE-2020-6431"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6431",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6431"
},
{
"cve": "CVE-2020-6432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6432"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6432",
"url": "https://www.suse.com/security/cve/CVE-2020-6432"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6432",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6432"
},
{
"cve": "CVE-2020-6433",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6433"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6433",
"url": "https://www.suse.com/security/cve/CVE-2020-6433"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6433",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6433"
},
{
"cve": "CVE-2020-6434",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6434"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6434",
"url": "https://www.suse.com/security/cve/CVE-2020-6434"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6434",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6434"
},
{
"cve": "CVE-2020-6435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6435"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6435",
"url": "https://www.suse.com/security/cve/CVE-2020-6435"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6435",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6435"
},
{
"cve": "CVE-2020-6436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6436"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6436",
"url": "https://www.suse.com/security/cve/CVE-2020-6436"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6436",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6436"
},
{
"cve": "CVE-2020-6437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6437"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6437",
"url": "https://www.suse.com/security/cve/CVE-2020-6437"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6437",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6437"
},
{
"cve": "CVE-2020-6438",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6438"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6438",
"url": "https://www.suse.com/security/cve/CVE-2020-6438"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6438",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6438"
},
{
"cve": "CVE-2020-6439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6439"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6439",
"url": "https://www.suse.com/security/cve/CVE-2020-6439"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6439",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6439"
},
{
"cve": "CVE-2020-6440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6440"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6440",
"url": "https://www.suse.com/security/cve/CVE-2020-6440"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6440",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6440"
},
{
"cve": "CVE-2020-6441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6441"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6441",
"url": "https://www.suse.com/security/cve/CVE-2020-6441"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6441",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6441"
},
{
"cve": "CVE-2020-6442",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6442"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6442",
"url": "https://www.suse.com/security/cve/CVE-2020-6442"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6442",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6442"
},
{
"cve": "CVE-2020-6443",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6443"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6443",
"url": "https://www.suse.com/security/cve/CVE-2020-6443"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6443",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6443"
},
{
"cve": "CVE-2020-6444",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6444"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6444",
"url": "https://www.suse.com/security/cve/CVE-2020-6444"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6444",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6444"
},
{
"cve": "CVE-2020-6445",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6445"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6445",
"url": "https://www.suse.com/security/cve/CVE-2020-6445"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6445",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6445"
},
{
"cve": "CVE-2020-6446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6446"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6446",
"url": "https://www.suse.com/security/cve/CVE-2020-6446"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6446",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6446"
},
{
"cve": "CVE-2020-6447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6447"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6447",
"url": "https://www.suse.com/security/cve/CVE-2020-6447"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6447",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6447"
},
{
"cve": "CVE-2020-6448",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6448"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6448",
"url": "https://www.suse.com/security/cve/CVE-2020-6448"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6448",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6448"
},
{
"cve": "CVE-2020-6449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6449"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6449",
"url": "https://www.suse.com/security/cve/CVE-2020-6449"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6449",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6449"
},
{
"cve": "CVE-2020-6450",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6450"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6450",
"url": "https://www.suse.com/security/cve/CVE-2020-6450"
},
{
"category": "external",
"summary": "SUSE Bug 1168421 for CVE-2020-6450",
"url": "https://bugzilla.suse.com/1168421"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6450"
},
{
"cve": "CVE-2020-6451",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6451"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6451",
"url": "https://www.suse.com/security/cve/CVE-2020-6451"
},
{
"category": "external",
"summary": "SUSE Bug 1168421 for CVE-2020-6451",
"url": "https://bugzilla.suse.com/1168421"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6451"
},
{
"cve": "CVE-2020-6452",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6452"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6452",
"url": "https://www.suse.com/security/cve/CVE-2020-6452"
},
{
"category": "external",
"summary": "SUSE Bug 1168421 for CVE-2020-6452",
"url": "https://bugzilla.suse.com/1168421"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6452"
},
{
"cve": "CVE-2020-6454",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6454"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6454",
"url": "https://www.suse.com/security/cve/CVE-2020-6454"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6454",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6454"
},
{
"cve": "CVE-2020-6455",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6455"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6455",
"url": "https://www.suse.com/security/cve/CVE-2020-6455"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6455",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6455"
},
{
"cve": "CVE-2020-6456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6456"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolation via crafted clipboard contents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6456",
"url": "https://www.suse.com/security/cve/CVE-2020-6456"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6456",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6456"
},
{
"cve": "CVE-2020-6457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6457"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6457",
"url": "https://www.suse.com/security/cve/CVE-2020-6457"
},
{
"category": "external",
"summary": "SUSE Bug 1169729 for CVE-2020-6457",
"url": "https://bugzilla.suse.com/1169729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6457"
},
{
"cve": "CVE-2020-6458",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6458"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6458",
"url": "https://www.suse.com/security/cve/CVE-2020-6458"
},
{
"category": "external",
"summary": "SUSE Bug 1170107 for CVE-2020-6458",
"url": "https://bugzilla.suse.com/1170107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6458"
},
{
"cve": "CVE-2020-6459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6459"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6459",
"url": "https://www.suse.com/security/cve/CVE-2020-6459"
},
{
"category": "external",
"summary": "SUSE Bug 1170107 for CVE-2020-6459",
"url": "https://bugzilla.suse.com/1170107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6459"
},
{
"cve": "CVE-2020-6460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6460"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6460",
"url": "https://www.suse.com/security/cve/CVE-2020-6460"
},
{
"category": "external",
"summary": "SUSE Bug 1170107 for CVE-2020-6460",
"url": "https://bugzilla.suse.com/1170107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6460"
},
{
"cve": "CVE-2020-6462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6462"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6462",
"url": "https://www.suse.com/security/cve/CVE-2020-6462"
},
{
"category": "external",
"summary": "SUSE Bug 1170707 for CVE-2020-6462",
"url": "https://bugzilla.suse.com/1170707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6462"
},
{
"cve": "CVE-2020-6463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6463"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6463",
"url": "https://www.suse.com/security/cve/CVE-2020-6463"
},
{
"category": "external",
"summary": "SUSE Bug 1171975 for CVE-2020-6463",
"url": "https://bugzilla.suse.com/1171975"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-6463",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6463"
},
{
"cve": "CVE-2020-6464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6464"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6464",
"url": "https://www.suse.com/security/cve/CVE-2020-6464"
},
{
"category": "external",
"summary": "SUSE Bug 1171247 for CVE-2020-6464",
"url": "https://bugzilla.suse.com/1171247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6464"
},
{
"cve": "CVE-2020-6465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6465"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6465",
"url": "https://www.suse.com/security/cve/CVE-2020-6465"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6465",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6465"
},
{
"cve": "CVE-2020-6466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6466"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6466",
"url": "https://www.suse.com/security/cve/CVE-2020-6466"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6466",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6466"
},
{
"cve": "CVE-2020-6467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6467"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6467",
"url": "https://www.suse.com/security/cve/CVE-2020-6467"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6467",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6467"
},
{
"cve": "CVE-2020-6468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6468"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6468",
"url": "https://www.suse.com/security/cve/CVE-2020-6468"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6468",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6468"
},
{
"cve": "CVE-2020-6469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6469"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6469",
"url": "https://www.suse.com/security/cve/CVE-2020-6469"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6469",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6469"
},
{
"cve": "CVE-2020-6470",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6470"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6470",
"url": "https://www.suse.com/security/cve/CVE-2020-6470"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6470",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6470"
},
{
"cve": "CVE-2020-6471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6471"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6471",
"url": "https://www.suse.com/security/cve/CVE-2020-6471"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6471",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6471"
},
{
"cve": "CVE-2020-6472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6472"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6472",
"url": "https://www.suse.com/security/cve/CVE-2020-6472"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6472",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6472"
},
{
"cve": "CVE-2020-6473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6473"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6473",
"url": "https://www.suse.com/security/cve/CVE-2020-6473"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6473",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6473"
},
{
"cve": "CVE-2020-6474",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6474"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6474",
"url": "https://www.suse.com/security/cve/CVE-2020-6474"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6474",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6474"
},
{
"cve": "CVE-2020-6475",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6475"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6475",
"url": "https://www.suse.com/security/cve/CVE-2020-6475"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6475",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6475"
},
{
"cve": "CVE-2020-6476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6476"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6476",
"url": "https://www.suse.com/security/cve/CVE-2020-6476"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6476",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6476"
},
{
"cve": "CVE-2020-6477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6477"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6477",
"url": "https://www.suse.com/security/cve/CVE-2020-6477"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6477",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6477"
},
{
"cve": "CVE-2020-6478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6478"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6478",
"url": "https://www.suse.com/security/cve/CVE-2020-6478"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6478",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6478"
},
{
"cve": "CVE-2020-6479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6479"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6479",
"url": "https://www.suse.com/security/cve/CVE-2020-6479"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6479",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6479"
},
{
"cve": "CVE-2020-6480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6480"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6480",
"url": "https://www.suse.com/security/cve/CVE-2020-6480"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6480",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6480"
},
{
"cve": "CVE-2020-6481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6481"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6481",
"url": "https://www.suse.com/security/cve/CVE-2020-6481"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6481",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6481"
},
{
"cve": "CVE-2020-6482",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6482"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6482",
"url": "https://www.suse.com/security/cve/CVE-2020-6482"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6482",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6482"
},
{
"cve": "CVE-2020-6483",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6483"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6483",
"url": "https://www.suse.com/security/cve/CVE-2020-6483"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6483",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6483"
},
{
"cve": "CVE-2020-6484",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6484"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6484",
"url": "https://www.suse.com/security/cve/CVE-2020-6484"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6484",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6484"
},
{
"cve": "CVE-2020-6485",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6485"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6485",
"url": "https://www.suse.com/security/cve/CVE-2020-6485"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6485",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6485"
},
{
"cve": "CVE-2020-6486",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6486"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6486",
"url": "https://www.suse.com/security/cve/CVE-2020-6486"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6486",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6486"
},
{
"cve": "CVE-2020-6487",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6487"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6487",
"url": "https://www.suse.com/security/cve/CVE-2020-6487"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6487",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6487"
},
{
"cve": "CVE-2020-6488",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6488"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6488",
"url": "https://www.suse.com/security/cve/CVE-2020-6488"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6488",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6488"
},
{
"cve": "CVE-2020-6489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6489"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive information from disk via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6489",
"url": "https://www.suse.com/security/cve/CVE-2020-6489"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6489",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6489"
},
{
"cve": "CVE-2020-6490",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6490"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6490",
"url": "https://www.suse.com/security/cve/CVE-2020-6490"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6490",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6490"
},
{
"cve": "CVE-2020-6491",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6491"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6491",
"url": "https://www.suse.com/security/cve/CVE-2020-6491"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6491",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6491"
},
{
"cve": "CVE-2020-6493",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6493"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6493",
"url": "https://www.suse.com/security/cve/CVE-2020-6493"
},
{
"category": "external",
"summary": "SUSE Bug 1172496 for CVE-2020-6493",
"url": "https://bugzilla.suse.com/1172496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6493"
},
{
"cve": "CVE-2020-6494",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6494"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6494",
"url": "https://www.suse.com/security/cve/CVE-2020-6494"
},
{
"category": "external",
"summary": "SUSE Bug 1172496 for CVE-2020-6494",
"url": "https://bugzilla.suse.com/1172496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6494"
},
{
"cve": "CVE-2020-6495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6495"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6495",
"url": "https://www.suse.com/security/cve/CVE-2020-6495"
},
{
"category": "external",
"summary": "SUSE Bug 1172496 for CVE-2020-6495",
"url": "https://bugzilla.suse.com/1172496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6495"
},
{
"cve": "CVE-2020-6496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6496"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6496",
"url": "https://www.suse.com/security/cve/CVE-2020-6496"
},
{
"category": "external",
"summary": "SUSE Bug 1172496 for CVE-2020-6496",
"url": "https://bugzilla.suse.com/1172496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6496"
},
{
"cve": "CVE-2020-6505",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6505"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6505",
"url": "https://www.suse.com/security/cve/CVE-2020-6505"
},
{
"category": "external",
"summary": "SUSE Bug 1173029 for CVE-2020-6505",
"url": "https://bugzilla.suse.com/1173029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6505"
},
{
"cve": "CVE-2020-6506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6506"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6506",
"url": "https://www.suse.com/security/cve/CVE-2020-6506"
},
{
"category": "external",
"summary": "SUSE Bug 1173029 for CVE-2020-6506",
"url": "https://bugzilla.suse.com/1173029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6506"
},
{
"cve": "CVE-2020-6507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6507"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6507",
"url": "https://www.suse.com/security/cve/CVE-2020-6507"
},
{
"category": "external",
"summary": "SUSE Bug 1173029 for CVE-2020-6507",
"url": "https://bugzilla.suse.com/1173029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6507"
},
{
"cve": "CVE-2020-6509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6509"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6509",
"url": "https://www.suse.com/security/cve/CVE-2020-6509"
},
{
"category": "external",
"summary": "SUSE Bug 1173251 for CVE-2020-6509",
"url": "https://bugzilla.suse.com/1173251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6509"
},
{
"cve": "CVE-2020-6510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6510"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6510",
"url": "https://www.suse.com/security/cve/CVE-2020-6510"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6510",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6510"
},
{
"cve": "CVE-2020-6511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6511"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6511",
"url": "https://www.suse.com/security/cve/CVE-2020-6511"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6511",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6511"
},
{
"cve": "CVE-2020-6512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6512"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6512",
"url": "https://www.suse.com/security/cve/CVE-2020-6512"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6512",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6512"
},
{
"cve": "CVE-2020-6513",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6513"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6513",
"url": "https://www.suse.com/security/cve/CVE-2020-6513"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6513",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6513"
},
{
"cve": "CVE-2020-6514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6514"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6514",
"url": "https://www.suse.com/security/cve/CVE-2020-6514"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6514",
"url": "https://bugzilla.suse.com/1174189"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-6514",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6514"
},
{
"cve": "CVE-2020-6515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6515"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6515",
"url": "https://www.suse.com/security/cve/CVE-2020-6515"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6515",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6515"
},
{
"cve": "CVE-2020-6516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6516"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6516",
"url": "https://www.suse.com/security/cve/CVE-2020-6516"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6516",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6516"
},
{
"cve": "CVE-2020-6517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6517"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6517",
"url": "https://www.suse.com/security/cve/CVE-2020-6517"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6517",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6517"
},
{
"cve": "CVE-2020-6518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6518"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6518",
"url": "https://www.suse.com/security/cve/CVE-2020-6518"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6518",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6518"
},
{
"cve": "CVE-2020-6519",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6519"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6519",
"url": "https://www.suse.com/security/cve/CVE-2020-6519"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6519",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6519"
},
{
"cve": "CVE-2020-6520",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6520"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6520",
"url": "https://www.suse.com/security/cve/CVE-2020-6520"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6520",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6520"
},
{
"cve": "CVE-2020-6521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6521"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6521",
"url": "https://www.suse.com/security/cve/CVE-2020-6521"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6521",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6521"
},
{
"cve": "CVE-2020-6522",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6522"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6522",
"url": "https://www.suse.com/security/cve/CVE-2020-6522"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6522",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6522"
},
{
"cve": "CVE-2020-6523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6523"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6523",
"url": "https://www.suse.com/security/cve/CVE-2020-6523"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6523",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6523"
},
{
"cve": "CVE-2020-6524",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6524"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6524",
"url": "https://www.suse.com/security/cve/CVE-2020-6524"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6524",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6524"
},
{
"cve": "CVE-2020-6525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6525"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6525",
"url": "https://www.suse.com/security/cve/CVE-2020-6525"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6525",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6525"
},
{
"cve": "CVE-2020-6526",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6526"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6526",
"url": "https://www.suse.com/security/cve/CVE-2020-6526"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6526",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6526"
},
{
"cve": "CVE-2020-6527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6527"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6527",
"url": "https://www.suse.com/security/cve/CVE-2020-6527"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6527",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6527"
},
{
"cve": "CVE-2020-6528",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6528"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6528",
"url": "https://www.suse.com/security/cve/CVE-2020-6528"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6528",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6528"
},
{
"cve": "CVE-2020-6529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6529"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6529",
"url": "https://www.suse.com/security/cve/CVE-2020-6529"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6529",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6529"
},
{
"cve": "CVE-2020-6530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6530"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6530",
"url": "https://www.suse.com/security/cve/CVE-2020-6530"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6530",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6530"
},
{
"cve": "CVE-2020-6531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6531"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6531",
"url": "https://www.suse.com/security/cve/CVE-2020-6531"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6531",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6531"
},
{
"cve": "CVE-2020-6532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6532"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6532",
"url": "https://www.suse.com/security/cve/CVE-2020-6532"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6532",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6532"
},
{
"cve": "CVE-2020-6533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6533"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6533",
"url": "https://www.suse.com/security/cve/CVE-2020-6533"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6533",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6533"
},
{
"cve": "CVE-2020-6534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6534"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6534",
"url": "https://www.suse.com/security/cve/CVE-2020-6534"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6534",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6534"
},
{
"cve": "CVE-2020-6535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6535"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6535",
"url": "https://www.suse.com/security/cve/CVE-2020-6535"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6535",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6535"
},
{
"cve": "CVE-2020-6536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6536"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the user to install a PWA to spoof the contents of the Omnibox (URL bar) via a crafted PWA.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6536",
"url": "https://www.suse.com/security/cve/CVE-2020-6536"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6536",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6536"
},
{
"cve": "CVE-2020-6537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6537"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6537",
"url": "https://www.suse.com/security/cve/CVE-2020-6537"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6537",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6537"
},
{
"cve": "CVE-2020-6538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6538"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6538",
"url": "https://www.suse.com/security/cve/CVE-2020-6538"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6538",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6538"
},
{
"cve": "CVE-2020-6539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6539"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6539",
"url": "https://www.suse.com/security/cve/CVE-2020-6539"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6539",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6539"
},
{
"cve": "CVE-2020-6540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6540"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6540",
"url": "https://www.suse.com/security/cve/CVE-2020-6540"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6540",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6540"
},
{
"cve": "CVE-2020-6541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6541"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6541",
"url": "https://www.suse.com/security/cve/CVE-2020-6541"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6541",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6541"
},
{
"cve": "CVE-2020-6542",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6542"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6542",
"url": "https://www.suse.com/security/cve/CVE-2020-6542"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6542",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6542"
},
{
"cve": "CVE-2020-6543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6543"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6543",
"url": "https://www.suse.com/security/cve/CVE-2020-6543"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6543",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6543"
},
{
"cve": "CVE-2020-6544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6544"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6544",
"url": "https://www.suse.com/security/cve/CVE-2020-6544"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6544",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6544"
},
{
"cve": "CVE-2020-6545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6545"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6545",
"url": "https://www.suse.com/security/cve/CVE-2020-6545"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6545",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6545"
},
{
"cve": "CVE-2020-6546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6546"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6546",
"url": "https://www.suse.com/security/cve/CVE-2020-6546"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6546",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6546"
},
{
"cve": "CVE-2020-6547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6547"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6547",
"url": "https://www.suse.com/security/cve/CVE-2020-6547"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6547",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6547"
},
{
"cve": "CVE-2020-6548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6548"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6548",
"url": "https://www.suse.com/security/cve/CVE-2020-6548"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6548",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6548"
},
{
"cve": "CVE-2020-6549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6549"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6549",
"url": "https://www.suse.com/security/cve/CVE-2020-6549"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6549",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6549"
},
{
"cve": "CVE-2020-6550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6550"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6550",
"url": "https://www.suse.com/security/cve/CVE-2020-6550"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6550",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6550"
},
{
"cve": "CVE-2020-6551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6551"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6551",
"url": "https://www.suse.com/security/cve/CVE-2020-6551"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6551",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6551"
},
{
"cve": "CVE-2020-6552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6552"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6552",
"url": "https://www.suse.com/security/cve/CVE-2020-6552"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6552",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6552"
},
{
"cve": "CVE-2020-6553",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6553"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6553",
"url": "https://www.suse.com/security/cve/CVE-2020-6553"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6553",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6553"
},
{
"cve": "CVE-2020-6554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6554"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6554",
"url": "https://www.suse.com/security/cve/CVE-2020-6554"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6554",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6554"
},
{
"cve": "CVE-2020-6555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6555"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6555",
"url": "https://www.suse.com/security/cve/CVE-2020-6555"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6555",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6555"
},
{
"cve": "CVE-2020-6556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6556"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6556",
"url": "https://www.suse.com/security/cve/CVE-2020-6556"
},
{
"category": "external",
"summary": "SUSE Bug 1175505 for CVE-2020-6556",
"url": "https://bugzilla.suse.com/1175505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6556"
},
{
"cve": "CVE-2020-6557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6557"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6557",
"url": "https://www.suse.com/security/cve/CVE-2020-6557"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-6557",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6557"
},
{
"cve": "CVE-2020-6558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6558"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6558",
"url": "https://www.suse.com/security/cve/CVE-2020-6558"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6558",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6558"
},
{
"cve": "CVE-2020-6559",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6559"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6559",
"url": "https://www.suse.com/security/cve/CVE-2020-6559"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6559",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6559"
},
{
"cve": "CVE-2020-6560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6560"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6560",
"url": "https://www.suse.com/security/cve/CVE-2020-6560"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6560",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6560"
},
{
"cve": "CVE-2020-6561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6561"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6561",
"url": "https://www.suse.com/security/cve/CVE-2020-6561"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6561",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6561"
},
{
"cve": "CVE-2020-6562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6562"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6562",
"url": "https://www.suse.com/security/cve/CVE-2020-6562"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6562",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6562"
},
{
"cve": "CVE-2020-6563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6563"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6563",
"url": "https://www.suse.com/security/cve/CVE-2020-6563"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6563",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6563"
},
{
"cve": "CVE-2020-6564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6564"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6564",
"url": "https://www.suse.com/security/cve/CVE-2020-6564"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6564",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6564"
},
{
"cve": "CVE-2020-6565",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6565"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6565",
"url": "https://www.suse.com/security/cve/CVE-2020-6565"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6565",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6565"
},
{
"cve": "CVE-2020-6566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6566"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6566",
"url": "https://www.suse.com/security/cve/CVE-2020-6566"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6566",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6566"
},
{
"cve": "CVE-2020-6567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6567"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6567",
"url": "https://www.suse.com/security/cve/CVE-2020-6567"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6567",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6567"
},
{
"cve": "CVE-2020-6568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6568"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6568",
"url": "https://www.suse.com/security/cve/CVE-2020-6568"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6568",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6568"
},
{
"cve": "CVE-2020-6569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6569"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6569",
"url": "https://www.suse.com/security/cve/CVE-2020-6569"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6569",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6569"
},
{
"cve": "CVE-2020-6570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6570"
}
],
"notes": [
{
"category": "general",
"text": "Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted WebRTC interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6570",
"url": "https://www.suse.com/security/cve/CVE-2020-6570"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6570",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6570"
},
{
"cve": "CVE-2020-6571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6571"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6571",
"url": "https://www.suse.com/security/cve/CVE-2020-6571"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6571",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6571"
},
{
"cve": "CVE-2020-6573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6573"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6573",
"url": "https://www.suse.com/security/cve/CVE-2020-6573"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-6573",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6573"
},
{
"cve": "CVE-2020-6574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6574"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege escalation via a crafted binary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6574",
"url": "https://www.suse.com/security/cve/CVE-2020-6574"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-6574",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6574"
},
{
"cve": "CVE-2020-6575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6575"
}
],
"notes": [
{
"category": "general",
"text": "Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6575",
"url": "https://www.suse.com/security/cve/CVE-2020-6575"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-6575",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6575"
},
{
"cve": "CVE-2020-6576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6576"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6576",
"url": "https://www.suse.com/security/cve/CVE-2020-6576"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-6576",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6576"
},
{
"cve": "CVE-2020-6831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6831"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 68.8, Firefox \u003c 76, and Thunderbird \u003c 68.8.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6831",
"url": "https://www.suse.com/security/cve/CVE-2020-6831"
},
{
"category": "external",
"summary": "SUSE Bug 1171186 for CVE-2020-6831",
"url": "https://bugzilla.suse.com/1171186"
},
{
"category": "external",
"summary": "SUSE Bug 1171247 for CVE-2020-6831",
"url": "https://bugzilla.suse.com/1171247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6831"
},
{
"cve": "CVE-2021-21106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21106"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21106",
"url": "https://www.suse.com/security/cve/CVE-2021-21106"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21106",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21106"
},
{
"cve": "CVE-2021-21107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21107"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21107",
"url": "https://www.suse.com/security/cve/CVE-2021-21107"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21107",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21107"
},
{
"cve": "CVE-2021-21108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21108"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21108",
"url": "https://www.suse.com/security/cve/CVE-2021-21108"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21108",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21108"
},
{
"cve": "CVE-2021-21109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21109"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21109",
"url": "https://www.suse.com/security/cve/CVE-2021-21109"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21109",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21109"
},
{
"cve": "CVE-2021-21110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21110"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21110",
"url": "https://www.suse.com/security/cve/CVE-2021-21110"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21110",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21110"
},
{
"cve": "CVE-2021-21111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21111"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21111",
"url": "https://www.suse.com/security/cve/CVE-2021-21111"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21111",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21111"
},
{
"cve": "CVE-2021-21112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21112"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21112",
"url": "https://www.suse.com/security/cve/CVE-2021-21112"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21112",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21112"
},
{
"cve": "CVE-2021-21113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21113"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21113",
"url": "https://www.suse.com/security/cve/CVE-2021-21113"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21113",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21113"
},
{
"cve": "CVE-2021-21114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21114"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21114",
"url": "https://www.suse.com/security/cve/CVE-2021-21114"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21114",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21114"
},
{
"cve": "CVE-2021-21115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21115"
}
],
"notes": [
{
"category": "general",
"text": "User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21115",
"url": "https://www.suse.com/security/cve/CVE-2021-21115"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21115",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21115"
},
{
"cve": "CVE-2021-21116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21116"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21116",
"url": "https://www.suse.com/security/cve/CVE-2021-21116"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21116",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21116"
},
{
"cve": "CVE-2021-21117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21117"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21117",
"url": "https://www.suse.com/security/cve/CVE-2021-21117"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21117",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21117"
},
{
"cve": "CVE-2021-21118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21118"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21118",
"url": "https://www.suse.com/security/cve/CVE-2021-21118"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21118",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21118"
},
{
"cve": "CVE-2021-21119",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21119"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21119",
"url": "https://www.suse.com/security/cve/CVE-2021-21119"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21119",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21119"
},
{
"cve": "CVE-2021-21120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21120"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21120",
"url": "https://www.suse.com/security/cve/CVE-2021-21120"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21120",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21120"
},
{
"cve": "CVE-2021-21121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21121"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21121",
"url": "https://www.suse.com/security/cve/CVE-2021-21121"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21121",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21121"
},
{
"cve": "CVE-2021-21122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21122"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21122",
"url": "https://www.suse.com/security/cve/CVE-2021-21122"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21122",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21122"
},
{
"cve": "CVE-2021-21123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21123"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21123",
"url": "https://www.suse.com/security/cve/CVE-2021-21123"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21123",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21123"
},
{
"cve": "CVE-2021-21124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21124"
}
],
"notes": [
{
"category": "general",
"text": "Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21124",
"url": "https://www.suse.com/security/cve/CVE-2021-21124"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21124",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21124"
},
{
"cve": "CVE-2021-21125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21125"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21125",
"url": "https://www.suse.com/security/cve/CVE-2021-21125"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21125",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21125"
},
{
"cve": "CVE-2021-21126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21126"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21126",
"url": "https://www.suse.com/security/cve/CVE-2021-21126"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21126",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21126"
},
{
"cve": "CVE-2021-21127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21127"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21127",
"url": "https://www.suse.com/security/cve/CVE-2021-21127"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21127",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21127"
},
{
"cve": "CVE-2021-21128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21128"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21128",
"url": "https://www.suse.com/security/cve/CVE-2021-21128"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21128",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21128"
},
{
"cve": "CVE-2021-21129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21129"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21129",
"url": "https://www.suse.com/security/cve/CVE-2021-21129"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21129",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21129"
},
{
"cve": "CVE-2021-21130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21130"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21130",
"url": "https://www.suse.com/security/cve/CVE-2021-21130"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21130",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21130"
},
{
"cve": "CVE-2021-21131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21131"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21131",
"url": "https://www.suse.com/security/cve/CVE-2021-21131"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21131",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21131"
},
{
"cve": "CVE-2021-21132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21132"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21132",
"url": "https://www.suse.com/security/cve/CVE-2021-21132"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21132",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21132"
},
{
"cve": "CVE-2021-21133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21133"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21133",
"url": "https://www.suse.com/security/cve/CVE-2021-21133"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21133",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21133"
},
{
"cve": "CVE-2021-21134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21134"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21134",
"url": "https://www.suse.com/security/cve/CVE-2021-21134"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21134",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21134"
},
{
"cve": "CVE-2021-21135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21135"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21135",
"url": "https://www.suse.com/security/cve/CVE-2021-21135"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21135",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21135"
},
{
"cve": "CVE-2021-21136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21136"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21136",
"url": "https://www.suse.com/security/cve/CVE-2021-21136"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21136",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21136"
},
{
"cve": "CVE-2021-21137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21137"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21137",
"url": "https://www.suse.com/security/cve/CVE-2021-21137"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21137",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21137"
},
{
"cve": "CVE-2021-21138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21138"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21138",
"url": "https://www.suse.com/security/cve/CVE-2021-21138"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21138",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21138"
},
{
"cve": "CVE-2021-21139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21139"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21139",
"url": "https://www.suse.com/security/cve/CVE-2021-21139"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21139",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21139"
},
{
"cve": "CVE-2021-21140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21140"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21140",
"url": "https://www.suse.com/security/cve/CVE-2021-21140"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21140",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21140"
},
{
"cve": "CVE-2021-21141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21141"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21141",
"url": "https://www.suse.com/security/cve/CVE-2021-21141"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21141",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21141"
},
{
"cve": "CVE-2021-21142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21142"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21142",
"url": "https://www.suse.com/security/cve/CVE-2021-21142"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21142",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21142"
},
{
"cve": "CVE-2021-21143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21143"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21143",
"url": "https://www.suse.com/security/cve/CVE-2021-21143"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21143",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21143"
},
{
"cve": "CVE-2021-21144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21144"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21144",
"url": "https://www.suse.com/security/cve/CVE-2021-21144"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21144",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21144"
},
{
"cve": "CVE-2021-21145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21145"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21145",
"url": "https://www.suse.com/security/cve/CVE-2021-21145"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21145",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21145"
},
{
"cve": "CVE-2021-21146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21146"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21146",
"url": "https://www.suse.com/security/cve/CVE-2021-21146"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21146",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21146"
},
{
"cve": "CVE-2021-21147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21147"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21147",
"url": "https://www.suse.com/security/cve/CVE-2021-21147"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21147",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21147"
},
{
"cve": "CVE-2021-21148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21148"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21148",
"url": "https://www.suse.com/security/cve/CVE-2021-21148"
},
{
"category": "external",
"summary": "SUSE Bug 1181827 for CVE-2021-21148",
"url": "https://bugzilla.suse.com/1181827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21148"
},
{
"cve": "CVE-2021-21149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21149"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21149",
"url": "https://www.suse.com/security/cve/CVE-2021-21149"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21149",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21149"
},
{
"cve": "CVE-2021-21150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21150"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21150",
"url": "https://www.suse.com/security/cve/CVE-2021-21150"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21150",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21150"
},
{
"cve": "CVE-2021-21151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21151"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21151",
"url": "https://www.suse.com/security/cve/CVE-2021-21151"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21151",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21151"
},
{
"cve": "CVE-2021-21152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21152"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21152",
"url": "https://www.suse.com/security/cve/CVE-2021-21152"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21152",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21152"
},
{
"cve": "CVE-2021-21153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21153"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21153",
"url": "https://www.suse.com/security/cve/CVE-2021-21153"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21153",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21153"
},
{
"cve": "CVE-2021-21154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21154"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21154",
"url": "https://www.suse.com/security/cve/CVE-2021-21154"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21154",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21154"
},
{
"cve": "CVE-2021-21155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21155"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21155",
"url": "https://www.suse.com/security/cve/CVE-2021-21155"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21155",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21155"
},
{
"cve": "CVE-2021-21156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21156"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21156",
"url": "https://www.suse.com/security/cve/CVE-2021-21156"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21156",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21156"
},
{
"cve": "CVE-2021-21157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21157"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21157",
"url": "https://www.suse.com/security/cve/CVE-2021-21157"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21157",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21157"
},
{
"cve": "CVE-2021-21159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21159"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21159",
"url": "https://www.suse.com/security/cve/CVE-2021-21159"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21159",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21159",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21159"
},
{
"cve": "CVE-2021-21160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21160"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21160",
"url": "https://www.suse.com/security/cve/CVE-2021-21160"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21160",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21160",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21160"
},
{
"cve": "CVE-2021-21161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21161"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21161",
"url": "https://www.suse.com/security/cve/CVE-2021-21161"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21161",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21161",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21161"
},
{
"cve": "CVE-2021-21162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21162"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21162",
"url": "https://www.suse.com/security/cve/CVE-2021-21162"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21162",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21162",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21162"
},
{
"cve": "CVE-2021-21163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21163"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21163",
"url": "https://www.suse.com/security/cve/CVE-2021-21163"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21163",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21163",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21163"
},
{
"cve": "CVE-2021-21164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21164"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21164",
"url": "https://www.suse.com/security/cve/CVE-2021-21164"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21164",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21164",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21164"
},
{
"cve": "CVE-2021-21165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21165"
}
],
"notes": [
{
"category": "general",
"text": "Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21165",
"url": "https://www.suse.com/security/cve/CVE-2021-21165"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21165",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21165",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21165"
},
{
"cve": "CVE-2021-21166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21166"
}
],
"notes": [
{
"category": "general",
"text": "Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21166",
"url": "https://www.suse.com/security/cve/CVE-2021-21166"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21166",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21166",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21166"
},
{
"cve": "CVE-2021-21167",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21167"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21167",
"url": "https://www.suse.com/security/cve/CVE-2021-21167"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21167",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21167",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21167"
},
{
"cve": "CVE-2021-21168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21168"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21168",
"url": "https://www.suse.com/security/cve/CVE-2021-21168"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21168",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21168",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21168"
},
{
"cve": "CVE-2021-21169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21169"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21169",
"url": "https://www.suse.com/security/cve/CVE-2021-21169"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21169",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21169",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21169"
},
{
"cve": "CVE-2021-21170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21170"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21170",
"url": "https://www.suse.com/security/cve/CVE-2021-21170"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21170",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21170",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21170"
},
{
"cve": "CVE-2021-21171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21171"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21171",
"url": "https://www.suse.com/security/cve/CVE-2021-21171"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21171",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21171",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21171"
},
{
"cve": "CVE-2021-21172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21172"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21172",
"url": "https://www.suse.com/security/cve/CVE-2021-21172"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21172",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21172",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21172"
},
{
"cve": "CVE-2021-21173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21173"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21173",
"url": "https://www.suse.com/security/cve/CVE-2021-21173"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21173",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21173",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21173"
},
{
"cve": "CVE-2021-21174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21174"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21174",
"url": "https://www.suse.com/security/cve/CVE-2021-21174"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21174",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21174",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21174"
},
{
"cve": "CVE-2021-21175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21175"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21175",
"url": "https://www.suse.com/security/cve/CVE-2021-21175"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21175",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21175",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21175"
},
{
"cve": "CVE-2021-21176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21176"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21176",
"url": "https://www.suse.com/security/cve/CVE-2021-21176"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21176",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21176",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21176"
},
{
"cve": "CVE-2021-21177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21177"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21177",
"url": "https://www.suse.com/security/cve/CVE-2021-21177"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21177",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21177",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21177"
},
{
"cve": "CVE-2021-21178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21178"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21178",
"url": "https://www.suse.com/security/cve/CVE-2021-21178"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21178",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21178",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21178"
},
{
"cve": "CVE-2021-21179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21179"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21179",
"url": "https://www.suse.com/security/cve/CVE-2021-21179"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21179",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21179",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21179"
},
{
"cve": "CVE-2021-21180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21180"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21180",
"url": "https://www.suse.com/security/cve/CVE-2021-21180"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21180",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21180",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21180"
},
{
"cve": "CVE-2021-21181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21181"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21181",
"url": "https://www.suse.com/security/cve/CVE-2021-21181"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21181",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21181",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21181"
},
{
"cve": "CVE-2021-21182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21182"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21182",
"url": "https://www.suse.com/security/cve/CVE-2021-21182"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21182",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21182",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21182"
},
{
"cve": "CVE-2021-21183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21183"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21183",
"url": "https://www.suse.com/security/cve/CVE-2021-21183"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21183",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21183",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21183"
},
{
"cve": "CVE-2021-21184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21184"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21184",
"url": "https://www.suse.com/security/cve/CVE-2021-21184"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21184",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21184",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21184"
},
{
"cve": "CVE-2021-21185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21185"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21185",
"url": "https://www.suse.com/security/cve/CVE-2021-21185"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21185",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21185",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21185"
},
{
"cve": "CVE-2021-21186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21186"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21186",
"url": "https://www.suse.com/security/cve/CVE-2021-21186"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21186",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21186",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21186"
},
{
"cve": "CVE-2021-21187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21187"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21187",
"url": "https://www.suse.com/security/cve/CVE-2021-21187"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21187",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21187",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21187"
},
{
"cve": "CVE-2021-21188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21188"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21188",
"url": "https://www.suse.com/security/cve/CVE-2021-21188"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21188",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21188",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21188"
},
{
"cve": "CVE-2021-21189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21189"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21189",
"url": "https://www.suse.com/security/cve/CVE-2021-21189"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21189",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21189",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21189"
},
{
"cve": "CVE-2021-21190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21190"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21190",
"url": "https://www.suse.com/security/cve/CVE-2021-21190"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21190",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21190",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21190"
},
{
"cve": "CVE-2021-21191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21191"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21191",
"url": "https://www.suse.com/security/cve/CVE-2021-21191"
},
{
"category": "external",
"summary": "SUSE Bug 1183515 for CVE-2021-21191",
"url": "https://bugzilla.suse.com/1183515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21191"
},
{
"cve": "CVE-2021-21192",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21192"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21192",
"url": "https://www.suse.com/security/cve/CVE-2021-21192"
},
{
"category": "external",
"summary": "SUSE Bug 1183515 for CVE-2021-21192",
"url": "https://bugzilla.suse.com/1183515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21192"
},
{
"cve": "CVE-2021-21193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21193"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21193",
"url": "https://www.suse.com/security/cve/CVE-2021-21193"
},
{
"category": "external",
"summary": "SUSE Bug 1183515 for CVE-2021-21193",
"url": "https://bugzilla.suse.com/1183515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21193"
},
{
"cve": "CVE-2021-21194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21194"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21194",
"url": "https://www.suse.com/security/cve/CVE-2021-21194"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21194",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21194"
},
{
"cve": "CVE-2021-21195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21195"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21195",
"url": "https://www.suse.com/security/cve/CVE-2021-21195"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21195",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21195"
},
{
"cve": "CVE-2021-21196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21196"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21196",
"url": "https://www.suse.com/security/cve/CVE-2021-21196"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21196",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21196"
},
{
"cve": "CVE-2021-21197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21197"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21197",
"url": "https://www.suse.com/security/cve/CVE-2021-21197"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21197",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21197"
},
{
"cve": "CVE-2021-21198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21198"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21198",
"url": "https://www.suse.com/security/cve/CVE-2021-21198"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21198",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21198"
},
{
"cve": "CVE-2021-21199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21199"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21199",
"url": "https://www.suse.com/security/cve/CVE-2021-21199"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21199",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21199"
},
{
"cve": "CVE-2021-21201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21201"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21201",
"url": "https://www.suse.com/security/cve/CVE-2021-21201"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21201",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21201"
},
{
"cve": "CVE-2021-21202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21202"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21202",
"url": "https://www.suse.com/security/cve/CVE-2021-21202"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21202",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21202"
},
{
"cve": "CVE-2021-21203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21203"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21203",
"url": "https://www.suse.com/security/cve/CVE-2021-21203"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21203",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21203"
},
{
"cve": "CVE-2021-21204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21204"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21204",
"url": "https://www.suse.com/security/cve/CVE-2021-21204"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21204",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21204"
},
{
"cve": "CVE-2021-21205",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21205"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21205",
"url": "https://www.suse.com/security/cve/CVE-2021-21205"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21205",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21205"
},
{
"cve": "CVE-2021-21206",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21206"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21206",
"url": "https://www.suse.com/security/cve/CVE-2021-21206"
},
{
"category": "external",
"summary": "SUSE Bug 1184700 for CVE-2021-21206",
"url": "https://bugzilla.suse.com/1184700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21206"
},
{
"cve": "CVE-2021-21207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21207"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21207",
"url": "https://www.suse.com/security/cve/CVE-2021-21207"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21207",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21207"
},
{
"cve": "CVE-2021-21208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21208"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21208",
"url": "https://www.suse.com/security/cve/CVE-2021-21208"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21208",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21208"
},
{
"cve": "CVE-2021-21209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21209"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21209",
"url": "https://www.suse.com/security/cve/CVE-2021-21209"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21209",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21209"
},
{
"cve": "CVE-2021-21210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21210"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21210",
"url": "https://www.suse.com/security/cve/CVE-2021-21210"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21210",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21210"
},
{
"cve": "CVE-2021-21211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21211"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21211",
"url": "https://www.suse.com/security/cve/CVE-2021-21211"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21211",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21211"
},
{
"cve": "CVE-2021-21212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21212"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21212",
"url": "https://www.suse.com/security/cve/CVE-2021-21212"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21212",
"url": "https://bugzilla.suse.com/1184764"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-21212",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21212"
},
{
"cve": "CVE-2021-21213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21213"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21213",
"url": "https://www.suse.com/security/cve/CVE-2021-21213"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21213",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21213"
},
{
"cve": "CVE-2021-21214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21214"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21214",
"url": "https://www.suse.com/security/cve/CVE-2021-21214"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21214",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21214"
},
{
"cve": "CVE-2021-21215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21215"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21215",
"url": "https://www.suse.com/security/cve/CVE-2021-21215"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21215",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21215"
},
{
"cve": "CVE-2021-21216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21216"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21216",
"url": "https://www.suse.com/security/cve/CVE-2021-21216"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21216",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21216"
},
{
"cve": "CVE-2021-21217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21217"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21217",
"url": "https://www.suse.com/security/cve/CVE-2021-21217"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21217",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21217"
},
{
"cve": "CVE-2021-21218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21218"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21218",
"url": "https://www.suse.com/security/cve/CVE-2021-21218"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21218",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21218"
},
{
"cve": "CVE-2021-21219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21219"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21219",
"url": "https://www.suse.com/security/cve/CVE-2021-21219"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21219",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21219"
},
{
"cve": "CVE-2021-21220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21220"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21220",
"url": "https://www.suse.com/security/cve/CVE-2021-21220"
},
{
"category": "external",
"summary": "SUSE Bug 1184700 for CVE-2021-21220",
"url": "https://bugzilla.suse.com/1184700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21220"
},
{
"cve": "CVE-2021-21221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21221"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21221",
"url": "https://www.suse.com/security/cve/CVE-2021-21221"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21221",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21221"
},
{
"cve": "CVE-2021-21222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21222"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21222",
"url": "https://www.suse.com/security/cve/CVE-2021-21222"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21222",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21222"
},
{
"cve": "CVE-2021-21223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21223"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21223",
"url": "https://www.suse.com/security/cve/CVE-2021-21223"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21223",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21223"
},
{
"cve": "CVE-2021-21224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21224"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21224",
"url": "https://www.suse.com/security/cve/CVE-2021-21224"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21224",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21224"
},
{
"cve": "CVE-2021-21225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21225"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21225",
"url": "https://www.suse.com/security/cve/CVE-2021-21225"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21225",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21225"
},
{
"cve": "CVE-2021-21226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21226"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21226",
"url": "https://www.suse.com/security/cve/CVE-2021-21226"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21226",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21226"
},
{
"cve": "CVE-2021-21227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21227"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21227",
"url": "https://www.suse.com/security/cve/CVE-2021-21227"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21227",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21227"
},
{
"cve": "CVE-2021-21228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21228"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21228",
"url": "https://www.suse.com/security/cve/CVE-2021-21228"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21228",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21228"
},
{
"cve": "CVE-2021-21229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21229"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21229",
"url": "https://www.suse.com/security/cve/CVE-2021-21229"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21229",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21229"
},
{
"cve": "CVE-2021-21230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21230"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21230",
"url": "https://www.suse.com/security/cve/CVE-2021-21230"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21230",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21230"
},
{
"cve": "CVE-2021-21231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21231"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21231",
"url": "https://www.suse.com/security/cve/CVE-2021-21231"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21231",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21231"
},
{
"cve": "CVE-2021-21232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21232"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21232",
"url": "https://www.suse.com/security/cve/CVE-2021-21232"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21232",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21232"
},
{
"cve": "CVE-2021-21233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21233"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21233",
"url": "https://www.suse.com/security/cve/CVE-2021-21233"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21233",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21233"
},
{
"cve": "CVE-2021-30506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30506"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to install a web application to inject scripts or HTML into a privileged page via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30506",
"url": "https://www.suse.com/security/cve/CVE-2021-30506"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30506",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30506"
},
{
"cve": "CVE-2021-30507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30507"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30507",
"url": "https://www.suse.com/security/cve/CVE-2021-30507"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30507",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30507"
},
{
"cve": "CVE-2021-30508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30508"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30508",
"url": "https://www.suse.com/security/cve/CVE-2021-30508"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30508",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30508"
},
{
"cve": "CVE-2021-30509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30509"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page and a crafted Chrome extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30509",
"url": "https://www.suse.com/security/cve/CVE-2021-30509"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30509",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30509"
},
{
"cve": "CVE-2021-30510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30510"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30510",
"url": "https://www.suse.com/security/cve/CVE-2021-30510"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30510",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30510"
},
{
"cve": "CVE-2021-30511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30511"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30511",
"url": "https://www.suse.com/security/cve/CVE-2021-30511"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30511",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30511"
},
{
"cve": "CVE-2021-30512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30512"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30512",
"url": "https://www.suse.com/security/cve/CVE-2021-30512"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30512",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30512"
},
{
"cve": "CVE-2021-30513",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30513"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30513",
"url": "https://www.suse.com/security/cve/CVE-2021-30513"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30513",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30513"
},
{
"cve": "CVE-2021-30514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30514"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30514",
"url": "https://www.suse.com/security/cve/CVE-2021-30514"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30514",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30514"
},
{
"cve": "CVE-2021-30515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30515"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30515",
"url": "https://www.suse.com/security/cve/CVE-2021-30515"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30515",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30515"
},
{
"cve": "CVE-2021-30516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30516"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30516",
"url": "https://www.suse.com/security/cve/CVE-2021-30516"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30516",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30516"
},
{
"cve": "CVE-2021-30517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30517"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30517",
"url": "https://www.suse.com/security/cve/CVE-2021-30517"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30517",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30517"
},
{
"cve": "CVE-2021-30518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30518"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30518",
"url": "https://www.suse.com/security/cve/CVE-2021-30518"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30518",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30518"
},
{
"cve": "CVE-2021-30519",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30519"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments app to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30519",
"url": "https://www.suse.com/security/cve/CVE-2021-30519"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30519",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30519"
},
{
"cve": "CVE-2021-30520",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30520"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30520",
"url": "https://www.suse.com/security/cve/CVE-2021-30520"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30520",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30520"
},
{
"cve": "CVE-2021-30521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30521"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30521",
"url": "https://www.suse.com/security/cve/CVE-2021-30521"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30521",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30521"
},
{
"cve": "CVE-2021-30522",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30522"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30522",
"url": "https://www.suse.com/security/cve/CVE-2021-30522"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30522",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30522"
},
{
"cve": "CVE-2021-30523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30523"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30523",
"url": "https://www.suse.com/security/cve/CVE-2021-30523"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30523",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30523"
},
{
"cve": "CVE-2021-30524",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30524"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30524",
"url": "https://www.suse.com/security/cve/CVE-2021-30524"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30524",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30524"
},
{
"cve": "CVE-2021-30525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30525"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30525",
"url": "https://www.suse.com/security/cve/CVE-2021-30525"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30525",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30525"
},
{
"cve": "CVE-2021-30526",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30526"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30526",
"url": "https://www.suse.com/security/cve/CVE-2021-30526"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30526",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30526"
},
{
"cve": "CVE-2021-30527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30527"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30527",
"url": "https://www.suse.com/security/cve/CVE-2021-30527"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30527",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30527"
},
{
"cve": "CVE-2021-30528",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30528"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30528",
"url": "https://www.suse.com/security/cve/CVE-2021-30528"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30528",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30528"
},
{
"cve": "CVE-2021-30529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30529"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30529",
"url": "https://www.suse.com/security/cve/CVE-2021-30529"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30529",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30529"
},
{
"cve": "CVE-2021-30530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30530"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30530",
"url": "https://www.suse.com/security/cve/CVE-2021-30530"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30530",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30530"
},
{
"cve": "CVE-2021-30531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30531"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30531",
"url": "https://www.suse.com/security/cve/CVE-2021-30531"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30531",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30531"
},
{
"cve": "CVE-2021-30532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30532"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30532",
"url": "https://www.suse.com/security/cve/CVE-2021-30532"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30532",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30532"
},
{
"cve": "CVE-2021-30533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30533"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30533",
"url": "https://www.suse.com/security/cve/CVE-2021-30533"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30533",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30533"
},
{
"cve": "CVE-2021-30534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30534"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30534",
"url": "https://www.suse.com/security/cve/CVE-2021-30534"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30534",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30534"
},
{
"cve": "CVE-2021-30535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30535"
}
],
"notes": [
{
"category": "general",
"text": "Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30535",
"url": "https://www.suse.com/security/cve/CVE-2021-30535"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30535",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30535"
},
{
"cve": "CVE-2021-30536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30536"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30536",
"url": "https://www.suse.com/security/cve/CVE-2021-30536"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30536",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30536"
},
{
"cve": "CVE-2021-30537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30537"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass cookie policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30537",
"url": "https://www.suse.com/security/cve/CVE-2021-30537"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30537",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30537"
},
{
"cve": "CVE-2021-30538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30538"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30538",
"url": "https://www.suse.com/security/cve/CVE-2021-30538"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30538",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30538"
},
{
"cve": "CVE-2021-30539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30539"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30539",
"url": "https://www.suse.com/security/cve/CVE-2021-30539"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30539",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30539"
},
{
"cve": "CVE-2021-30540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30540"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30540",
"url": "https://www.suse.com/security/cve/CVE-2021-30540"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30540",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30540"
},
{
"cve": "CVE-2021-30541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30541"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30541",
"url": "https://www.suse.com/security/cve/CVE-2021-30541"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30541",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30541"
},
{
"cve": "CVE-2021-30544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30544"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30544",
"url": "https://www.suse.com/security/cve/CVE-2021-30544"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30544",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30544"
},
{
"cve": "CVE-2021-30545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30545"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30545",
"url": "https://www.suse.com/security/cve/CVE-2021-30545"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30545",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30545"
},
{
"cve": "CVE-2021-30546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30546"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30546",
"url": "https://www.suse.com/security/cve/CVE-2021-30546"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30546",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30546"
},
{
"cve": "CVE-2021-30547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30547"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30547",
"url": "https://www.suse.com/security/cve/CVE-2021-30547"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30547",
"url": "https://bugzilla.suse.com/1187141"
},
{
"category": "external",
"summary": "SUSE Bug 1188275 for CVE-2021-30547",
"url": "https://bugzilla.suse.com/1188275"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30547"
},
{
"cve": "CVE-2021-30548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30548"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30548",
"url": "https://www.suse.com/security/cve/CVE-2021-30548"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30548",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30548"
},
{
"cve": "CVE-2021-30549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30549"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30549",
"url": "https://www.suse.com/security/cve/CVE-2021-30549"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30549",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30549"
},
{
"cve": "CVE-2021-30550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30550"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30550",
"url": "https://www.suse.com/security/cve/CVE-2021-30550"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30550",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30550"
},
{
"cve": "CVE-2021-30551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30551"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30551",
"url": "https://www.suse.com/security/cve/CVE-2021-30551"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30551",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30551"
},
{
"cve": "CVE-2021-30552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30552"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30552",
"url": "https://www.suse.com/security/cve/CVE-2021-30552"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30552",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30552"
},
{
"cve": "CVE-2021-30553",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30553"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30553",
"url": "https://www.suse.com/security/cve/CVE-2021-30553"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30553",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30553"
},
{
"cve": "CVE-2021-30554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30554"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30554",
"url": "https://www.suse.com/security/cve/CVE-2021-30554"
},
{
"category": "external",
"summary": "SUSE Bug 1187481 for CVE-2021-30554",
"url": "https://bugzilla.suse.com/1187481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30554"
},
{
"cve": "CVE-2021-30555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30555"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and user gesture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30555",
"url": "https://www.suse.com/security/cve/CVE-2021-30555"
},
{
"category": "external",
"summary": "SUSE Bug 1187481 for CVE-2021-30555",
"url": "https://bugzilla.suse.com/1187481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30555"
},
{
"cve": "CVE-2021-30556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30556"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30556",
"url": "https://www.suse.com/security/cve/CVE-2021-30556"
},
{
"category": "external",
"summary": "SUSE Bug 1187481 for CVE-2021-30556",
"url": "https://bugzilla.suse.com/1187481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30556"
},
{
"cve": "CVE-2021-30557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30557"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30557",
"url": "https://www.suse.com/security/cve/CVE-2021-30557"
},
{
"category": "external",
"summary": "SUSE Bug 1187481 for CVE-2021-30557",
"url": "https://bugzilla.suse.com/1187481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30557"
},
{
"cve": "CVE-2021-30559",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30559"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30559",
"url": "https://www.suse.com/security/cve/CVE-2021-30559"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30559",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30559"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-30561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30561"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30561",
"url": "https://www.suse.com/security/cve/CVE-2021-30561"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30561",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30561"
},
{
"cve": "CVE-2021-30562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30562"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30562",
"url": "https://www.suse.com/security/cve/CVE-2021-30562"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30562",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30562"
},
{
"cve": "CVE-2021-30563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30563"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30563",
"url": "https://www.suse.com/security/cve/CVE-2021-30563"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30563",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30563"
},
{
"cve": "CVE-2021-30564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30564"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30564",
"url": "https://www.suse.com/security/cve/CVE-2021-30564"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30564",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30564"
},
{
"cve": "CVE-2021-30565",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30565"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30565",
"url": "https://www.suse.com/security/cve/CVE-2021-30565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30565"
},
{
"cve": "CVE-2021-30566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30566"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30566",
"url": "https://www.suse.com/security/cve/CVE-2021-30566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30566"
},
{
"cve": "CVE-2021-30567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30567"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to open DevTools to potentially exploit heap corruption via specific user gesture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30567",
"url": "https://www.suse.com/security/cve/CVE-2021-30567"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30567"
},
{
"cve": "CVE-2021-30568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30568"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30568",
"url": "https://www.suse.com/security/cve/CVE-2021-30568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30568"
},
{
"cve": "CVE-2021-30569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30569"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30569",
"url": "https://www.suse.com/security/cve/CVE-2021-30569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30569"
},
{
"cve": "CVE-2021-30571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30571"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30571",
"url": "https://www.suse.com/security/cve/CVE-2021-30571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30571"
},
{
"cve": "CVE-2021-30572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30572"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30572",
"url": "https://www.suse.com/security/cve/CVE-2021-30572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30572"
},
{
"cve": "CVE-2021-30573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30573"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30573",
"url": "https://www.suse.com/security/cve/CVE-2021-30573"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30573"
},
{
"cve": "CVE-2021-30574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30574"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30574",
"url": "https://www.suse.com/security/cve/CVE-2021-30574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30574"
},
{
"cve": "CVE-2021-30575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30575"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30575",
"url": "https://www.suse.com/security/cve/CVE-2021-30575"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30575"
},
{
"cve": "CVE-2021-30576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30576"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30576",
"url": "https://www.suse.com/security/cve/CVE-2021-30576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30576"
},
{
"cve": "CVE-2021-30577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30577"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30577",
"url": "https://www.suse.com/security/cve/CVE-2021-30577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30577"
},
{
"cve": "CVE-2021-30578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30578"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30578",
"url": "https://www.suse.com/security/cve/CVE-2021-30578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30578"
},
{
"cve": "CVE-2021-30579",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30579"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in UI framework in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30579",
"url": "https://www.suse.com/security/cve/CVE-2021-30579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30579"
},
{
"cve": "CVE-2021-30581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30581"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30581",
"url": "https://www.suse.com/security/cve/CVE-2021-30581"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30581"
},
{
"cve": "CVE-2021-30582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30582"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30582",
"url": "https://www.suse.com/security/cve/CVE-2021-30582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30582"
},
{
"cve": "CVE-2021-30584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30584"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Downloads in Google Chrome on Android prior to 92.0.4515.107 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30584",
"url": "https://www.suse.com/security/cve/CVE-2021-30584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30584"
},
{
"cve": "CVE-2021-30585",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30585"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30585",
"url": "https://www.suse.com/security/cve/CVE-2021-30585"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30585"
},
{
"cve": "CVE-2021-30588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30588"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30588",
"url": "https://www.suse.com/security/cve/CVE-2021-30588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-30588"
},
{
"cve": "CVE-2021-30589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30589"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to bypass navigation restrictions via a crafted click-to-call link.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30589",
"url": "https://www.suse.com/security/cve/CVE-2021-30589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30589"
},
{
"cve": "CVE-2021-30590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30590"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30590",
"url": "https://www.suse.com/security/cve/CVE-2021-30590"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30590",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30590"
},
{
"cve": "CVE-2021-30591",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30591"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30591",
"url": "https://www.suse.com/security/cve/CVE-2021-30591"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30591",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30591"
},
{
"cve": "CVE-2021-30592",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30592"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30592",
"url": "https://www.suse.com/security/cve/CVE-2021-30592"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30592",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30592"
},
{
"cve": "CVE-2021-30593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30593"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30593",
"url": "https://www.suse.com/security/cve/CVE-2021-30593"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30593",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30593"
},
{
"cve": "CVE-2021-30594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30594"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30594",
"url": "https://www.suse.com/security/cve/CVE-2021-30594"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30594",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30594"
},
{
"cve": "CVE-2021-30596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30596"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30596",
"url": "https://www.suse.com/security/cve/CVE-2021-30596"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30596",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30596"
},
{
"cve": "CVE-2021-30597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30597"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30597",
"url": "https://www.suse.com/security/cve/CVE-2021-30597"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30597",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30597"
},
{
"cve": "CVE-2021-30598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30598"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30598",
"url": "https://www.suse.com/security/cve/CVE-2021-30598"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30598",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30598"
},
{
"cve": "CVE-2021-30599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30599"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30599",
"url": "https://www.suse.com/security/cve/CVE-2021-30599"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30599",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30599"
},
{
"cve": "CVE-2021-30600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30600"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30600",
"url": "https://www.suse.com/security/cve/CVE-2021-30600"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30600",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30600"
},
{
"cve": "CVE-2021-30601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30601"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30601",
"url": "https://www.suse.com/security/cve/CVE-2021-30601"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30601",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30601"
},
{
"cve": "CVE-2021-30602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30602"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30602",
"url": "https://www.suse.com/security/cve/CVE-2021-30602"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30602",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30602"
},
{
"cve": "CVE-2021-30603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30603"
}
],
"notes": [
{
"category": "general",
"text": "Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30603",
"url": "https://www.suse.com/security/cve/CVE-2021-30603"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30603",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30603"
},
{
"cve": "CVE-2021-30604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30604"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30604",
"url": "https://www.suse.com/security/cve/CVE-2021-30604"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30604",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30604"
},
{
"cve": "CVE-2021-30606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30606"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30606 Use after free in Blink",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30606",
"url": "https://www.suse.com/security/cve/CVE-2021-30606"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30606",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30606"
},
{
"cve": "CVE-2021-30607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30607"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30607 Use after free in Permissions",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30607",
"url": "https://www.suse.com/security/cve/CVE-2021-30607"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30607",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30607"
},
{
"cve": "CVE-2021-30608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30608"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30608 Use after free in Web Share",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30608",
"url": "https://www.suse.com/security/cve/CVE-2021-30608"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30608",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30608"
},
{
"cve": "CVE-2021-30609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30609"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30609 Use after free in Sign-In",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30609",
"url": "https://www.suse.com/security/cve/CVE-2021-30609"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30609",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30609"
},
{
"cve": "CVE-2021-30610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30610"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30610 Use after free in Extensions API",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30610",
"url": "https://www.suse.com/security/cve/CVE-2021-30610"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30610",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30610"
},
{
"cve": "CVE-2021-30611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30611"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30611 Use after free in WebRTC",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30611",
"url": "https://www.suse.com/security/cve/CVE-2021-30611"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30611",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30611"
},
{
"cve": "CVE-2021-30612",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30612"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30612 Use after free in WebRTC",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30612",
"url": "https://www.suse.com/security/cve/CVE-2021-30612"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30612",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30612"
},
{
"cve": "CVE-2021-30613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30613"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30613 Use after free in Base internals",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30613",
"url": "https://www.suse.com/security/cve/CVE-2021-30613"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30613",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30613"
},
{
"cve": "CVE-2021-30614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30614"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30614",
"url": "https://www.suse.com/security/cve/CVE-2021-30614"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30614",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30614"
},
{
"cve": "CVE-2021-30615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30615"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30615 Cross-origin data leak in Navigation",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30615",
"url": "https://www.suse.com/security/cve/CVE-2021-30615"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30615",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30615"
},
{
"cve": "CVE-2021-30616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30616"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30616 Use after free in Media",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30616",
"url": "https://www.suse.com/security/cve/CVE-2021-30616"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30616",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30616"
},
{
"cve": "CVE-2021-30617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30617"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30617 Policy bypass in Blink",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30617",
"url": "https://www.suse.com/security/cve/CVE-2021-30617"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30617",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30617"
},
{
"cve": "CVE-2021-30618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30618"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30618 Inappropriate implementation in DevTools",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30618",
"url": "https://www.suse.com/security/cve/CVE-2021-30618"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30618",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30618"
},
{
"cve": "CVE-2021-30619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30619"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30619 UI Spoofing in Autofill",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30619",
"url": "https://www.suse.com/security/cve/CVE-2021-30619"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30619",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30619"
},
{
"cve": "CVE-2021-30620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30620"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30620",
"url": "https://www.suse.com/security/cve/CVE-2021-30620"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30620",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30620"
},
{
"cve": "CVE-2021-30621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30621"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30621 UI Spoofing in Autofill",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30621",
"url": "https://www.suse.com/security/cve/CVE-2021-30621"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30621",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30621"
},
{
"cve": "CVE-2021-30622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30622"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30622 Use after free in WebApp Installs",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30622",
"url": "https://www.suse.com/security/cve/CVE-2021-30622"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30622",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30622"
},
{
"cve": "CVE-2021-30623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30623"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30623 Use after free in Bookmarks",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30623",
"url": "https://www.suse.com/security/cve/CVE-2021-30623"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30623",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30623"
},
{
"cve": "CVE-2021-30624",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30624"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30624 Use after free in Autofill",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30624",
"url": "https://www.suse.com/security/cve/CVE-2021-30624"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30624",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30624"
},
{
"cve": "CVE-2021-30625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30625"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30625",
"url": "https://www.suse.com/security/cve/CVE-2021-30625"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30625",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30625"
},
{
"cve": "CVE-2021-30626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30626"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30626",
"url": "https://www.suse.com/security/cve/CVE-2021-30626"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30626",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30626"
},
{
"cve": "CVE-2021-30627",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30627"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30627",
"url": "https://www.suse.com/security/cve/CVE-2021-30627"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30627",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30627"
},
{
"cve": "CVE-2021-30628",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30628"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30628",
"url": "https://www.suse.com/security/cve/CVE-2021-30628"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30628",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30628"
},
{
"cve": "CVE-2021-30629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30629"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30629",
"url": "https://www.suse.com/security/cve/CVE-2021-30629"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30629",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30629"
},
{
"cve": "CVE-2021-30630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30630"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30630",
"url": "https://www.suse.com/security/cve/CVE-2021-30630"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30630",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30630"
},
{
"cve": "CVE-2021-30631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30631"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30631",
"url": "https://www.suse.com/security/cve/CVE-2021-30631"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30631",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30631"
},
{
"cve": "CVE-2021-30632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30632"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30632",
"url": "https://www.suse.com/security/cve/CVE-2021-30632"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30632",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30632"
},
{
"cve": "CVE-2021-30633",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30633"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30633",
"url": "https://www.suse.com/security/cve/CVE-2021-30633"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30633",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30633"
},
{
"cve": "CVE-2021-37956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37956"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37956",
"url": "https://www.suse.com/security/cve/CVE-2021-37956"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37956",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37956"
},
{
"cve": "CVE-2021-37957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37957"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37957",
"url": "https://www.suse.com/security/cve/CVE-2021-37957"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37957",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37957"
},
{
"cve": "CVE-2021-37958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37958"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37958",
"url": "https://www.suse.com/security/cve/CVE-2021-37958"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37958",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37958"
},
{
"cve": "CVE-2021-37959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37959"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37959",
"url": "https://www.suse.com/security/cve/CVE-2021-37959"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37959",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37959"
},
{
"cve": "CVE-2021-37960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37960"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37960",
"url": "https://www.suse.com/security/cve/CVE-2021-37960"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37960",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37960"
},
{
"cve": "CVE-2021-37961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37961"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37961",
"url": "https://www.suse.com/security/cve/CVE-2021-37961"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37961",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37961"
},
{
"cve": "CVE-2021-37962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37962"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37962",
"url": "https://www.suse.com/security/cve/CVE-2021-37962"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37962",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37962"
},
{
"cve": "CVE-2021-37963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37963"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in DevTools in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37963",
"url": "https://www.suse.com/security/cve/CVE-2021-37963"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37963",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37963"
},
{
"cve": "CVE-2021-37964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37964"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point to to potentially carryout a wifi impersonation attack via a crafted ONC file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37964",
"url": "https://www.suse.com/security/cve/CVE-2021-37964"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37964",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37964"
},
{
"cve": "CVE-2021-37965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37965"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37965",
"url": "https://www.suse.com/security/cve/CVE-2021-37965"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37965",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37965"
},
{
"cve": "CVE-2021-37966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37966"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37966",
"url": "https://www.suse.com/security/cve/CVE-2021-37966"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37966",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37966"
},
{
"cve": "CVE-2021-37967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37967"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37967",
"url": "https://www.suse.com/security/cve/CVE-2021-37967"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37967",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37967"
},
{
"cve": "CVE-2021-37968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37968"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37968",
"url": "https://www.suse.com/security/cve/CVE-2021-37968"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37968",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37968"
},
{
"cve": "CVE-2021-37969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37969"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalation via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37969",
"url": "https://www.suse.com/security/cve/CVE-2021-37969"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37969",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37969"
},
{
"cve": "CVE-2021-37970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37970"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37970",
"url": "https://www.suse.com/security/cve/CVE-2021-37970"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37970",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37970"
},
{
"cve": "CVE-2021-37971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37971"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37971",
"url": "https://www.suse.com/security/cve/CVE-2021-37971"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37971",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37971"
},
{
"cve": "CVE-2021-37972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37972"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37972",
"url": "https://www.suse.com/security/cve/CVE-2021-37972"
},
{
"category": "external",
"summary": "SUSE Bug 1190765 for CVE-2021-37972",
"url": "https://bugzilla.suse.com/1190765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37972"
},
{
"cve": "CVE-2021-37973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37973"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37973",
"url": "https://www.suse.com/security/cve/CVE-2021-37973"
},
{
"category": "external",
"summary": "SUSE Bug 1191166 for CVE-2021-37973",
"url": "https://bugzilla.suse.com/1191166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-37973"
},
{
"cve": "CVE-2021-37974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37974"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37974",
"url": "https://www.suse.com/security/cve/CVE-2021-37974"
},
{
"category": "external",
"summary": "SUSE Bug 1191204 for CVE-2021-37974",
"url": "https://bugzilla.suse.com/1191204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37974"
},
{
"cve": "CVE-2021-37975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37975"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37975",
"url": "https://www.suse.com/security/cve/CVE-2021-37975"
},
{
"category": "external",
"summary": "SUSE Bug 1191204 for CVE-2021-37975",
"url": "https://bugzilla.suse.com/1191204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37975"
},
{
"cve": "CVE-2021-37976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37976"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37976",
"url": "https://www.suse.com/security/cve/CVE-2021-37976"
},
{
"category": "external",
"summary": "SUSE Bug 1191204 for CVE-2021-37976",
"url": "https://bugzilla.suse.com/1191204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-37976"
},
{
"cve": "CVE-2021-37977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37977"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37977",
"url": "https://www.suse.com/security/cve/CVE-2021-37977"
},
{
"category": "external",
"summary": "SUSE Bug 1191463 for CVE-2021-37977",
"url": "https://bugzilla.suse.com/1191463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37977"
},
{
"cve": "CVE-2021-37978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37978"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37978",
"url": "https://www.suse.com/security/cve/CVE-2021-37978"
},
{
"category": "external",
"summary": "SUSE Bug 1191463 for CVE-2021-37978",
"url": "https://bugzilla.suse.com/1191463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37978"
},
{
"cve": "CVE-2021-37979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37979"
}
],
"notes": [
{
"category": "general",
"text": "heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37979",
"url": "https://www.suse.com/security/cve/CVE-2021-37979"
},
{
"category": "external",
"summary": "SUSE Bug 1191463 for CVE-2021-37979",
"url": "https://bugzilla.suse.com/1191463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37979"
},
{
"cve": "CVE-2021-37980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37980"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37980",
"url": "https://www.suse.com/security/cve/CVE-2021-37980"
},
{
"category": "external",
"summary": "SUSE Bug 1191463 for CVE-2021-37980",
"url": "https://bugzilla.suse.com/1191463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37980"
},
{
"cve": "CVE-2021-37981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37981"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37981",
"url": "https://www.suse.com/security/cve/CVE-2021-37981"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37981",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37981"
},
{
"cve": "CVE-2021-37982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37982"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37982",
"url": "https://www.suse.com/security/cve/CVE-2021-37982"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37982",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37982"
},
{
"cve": "CVE-2021-37983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37983"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37983",
"url": "https://www.suse.com/security/cve/CVE-2021-37983"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37983",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37983"
},
{
"cve": "CVE-2021-37984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37984"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37984",
"url": "https://www.suse.com/security/cve/CVE-2021-37984"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37984",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37984"
},
{
"cve": "CVE-2021-37985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37985"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37985",
"url": "https://www.suse.com/security/cve/CVE-2021-37985"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37985",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37985"
},
{
"cve": "CVE-2021-37986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37986"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37986",
"url": "https://www.suse.com/security/cve/CVE-2021-37986"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37986",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37986"
},
{
"cve": "CVE-2021-37987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37987"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37987",
"url": "https://www.suse.com/security/cve/CVE-2021-37987"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37987",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37987"
},
{
"cve": "CVE-2021-37988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37988"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced a user to engage in specific gestures to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37988",
"url": "https://www.suse.com/security/cve/CVE-2021-37988"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37988",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37988"
},
{
"cve": "CVE-2021-37989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37989"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to abuse content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37989",
"url": "https://www.suse.com/security/cve/CVE-2021-37989"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37989",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37989"
},
{
"cve": "CVE-2021-37990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37990"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37990",
"url": "https://www.suse.com/security/cve/CVE-2021-37990"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37990",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37990"
},
{
"cve": "CVE-2021-37991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37991"
}
],
"notes": [
{
"category": "general",
"text": "Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37991",
"url": "https://www.suse.com/security/cve/CVE-2021-37991"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37991",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37991"
},
{
"cve": "CVE-2021-37992",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37992"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37992",
"url": "https://www.suse.com/security/cve/CVE-2021-37992"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37992",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37992"
},
{
"cve": "CVE-2021-37993",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37993"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37993",
"url": "https://www.suse.com/security/cve/CVE-2021-37993"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37993",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37993"
},
{
"cve": "CVE-2021-37994",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37994"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37994",
"url": "https://www.suse.com/security/cve/CVE-2021-37994"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37994",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37994"
},
{
"cve": "CVE-2021-37995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37995"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37995",
"url": "https://www.suse.com/security/cve/CVE-2021-37995"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37995",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37995"
},
{
"cve": "CVE-2021-37996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37996"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input Downloads in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37996",
"url": "https://www.suse.com/security/cve/CVE-2021-37996"
},
{
"category": "external",
"summary": "SUSE Bug 1191844 for CVE-2021-37996",
"url": "https://bugzilla.suse.com/1191844"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-37996"
},
{
"cve": "CVE-2021-37997",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37997"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37997",
"url": "https://www.suse.com/security/cve/CVE-2021-37997"
},
{
"category": "external",
"summary": "SUSE Bug 1192184 for CVE-2021-37997",
"url": "https://bugzilla.suse.com/1192184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-37997"
},
{
"cve": "CVE-2021-37998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37998"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37998",
"url": "https://www.suse.com/security/cve/CVE-2021-37998"
},
{
"category": "external",
"summary": "SUSE Bug 1192184 for CVE-2021-37998",
"url": "https://bugzilla.suse.com/1192184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-37998"
},
{
"cve": "CVE-2021-37999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-37999"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new browser tab via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-37999",
"url": "https://www.suse.com/security/cve/CVE-2021-37999"
},
{
"category": "external",
"summary": "SUSE Bug 1192184 for CVE-2021-37999",
"url": "https://bugzilla.suse.com/1192184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-37999"
},
{
"cve": "CVE-2021-38000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38000"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38000",
"url": "https://www.suse.com/security/cve/CVE-2021-38000"
},
{
"category": "external",
"summary": "SUSE Bug 1192184 for CVE-2021-38000",
"url": "https://bugzilla.suse.com/1192184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38000"
},
{
"cve": "CVE-2021-38001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38001"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38001",
"url": "https://www.suse.com/security/cve/CVE-2021-38001"
},
{
"category": "external",
"summary": "SUSE Bug 1192184 for CVE-2021-38001",
"url": "https://bugzilla.suse.com/1192184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38001"
},
{
"cve": "CVE-2021-38002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38002"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38002",
"url": "https://www.suse.com/security/cve/CVE-2021-38002"
},
{
"category": "external",
"summary": "SUSE Bug 1192184 for CVE-2021-38002",
"url": "https://bugzilla.suse.com/1192184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38002"
},
{
"cve": "CVE-2021-38003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38003"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38003",
"url": "https://www.suse.com/security/cve/CVE-2021-38003"
},
{
"category": "external",
"summary": "SUSE Bug 1192184 for CVE-2021-38003",
"url": "https://bugzilla.suse.com/1192184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38003"
},
{
"cve": "CVE-2021-38005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38005"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38005",
"url": "https://www.suse.com/security/cve/CVE-2021-38005"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38005",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38005"
},
{
"cve": "CVE-2021-38006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38006"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38006",
"url": "https://www.suse.com/security/cve/CVE-2021-38006"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38006",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38006"
},
{
"cve": "CVE-2021-38007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38007"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38007",
"url": "https://www.suse.com/security/cve/CVE-2021-38007"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38007",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38007"
},
{
"cve": "CVE-2021-38008",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38008"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38008",
"url": "https://www.suse.com/security/cve/CVE-2021-38008"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38008",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38008"
},
{
"cve": "CVE-2021-38009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38009"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38009",
"url": "https://www.suse.com/security/cve/CVE-2021-38009"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38009",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38009"
},
{
"cve": "CVE-2021-38010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38010"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38010",
"url": "https://www.suse.com/security/cve/CVE-2021-38010"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38010",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38010"
},
{
"cve": "CVE-2021-38011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38011"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38011",
"url": "https://www.suse.com/security/cve/CVE-2021-38011"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38011",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38011"
},
{
"cve": "CVE-2021-38012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38012"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38012",
"url": "https://www.suse.com/security/cve/CVE-2021-38012"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38012",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38012"
},
{
"cve": "CVE-2021-38013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38013"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38013",
"url": "https://www.suse.com/security/cve/CVE-2021-38013"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38013",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38013"
},
{
"cve": "CVE-2021-38014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38014"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38014",
"url": "https://www.suse.com/security/cve/CVE-2021-38014"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38014",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38014"
},
{
"cve": "CVE-2021-38015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38015"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38015",
"url": "https://www.suse.com/security/cve/CVE-2021-38015"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38015",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38015"
},
{
"cve": "CVE-2021-38016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38016"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38016",
"url": "https://www.suse.com/security/cve/CVE-2021-38016"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38016",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38016"
},
{
"cve": "CVE-2021-38017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38017"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38017",
"url": "https://www.suse.com/security/cve/CVE-2021-38017"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38017",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38017"
},
{
"cve": "CVE-2021-38018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38018"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38018",
"url": "https://www.suse.com/security/cve/CVE-2021-38018"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38018",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38018"
},
{
"cve": "CVE-2021-38019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38019"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38019",
"url": "https://www.suse.com/security/cve/CVE-2021-38019"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38019",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38019"
},
{
"cve": "CVE-2021-38020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38020"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38020",
"url": "https://www.suse.com/security/cve/CVE-2021-38020"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38020",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38020"
},
{
"cve": "CVE-2021-38021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38021"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38021",
"url": "https://www.suse.com/security/cve/CVE-2021-38021"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38021",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38021"
},
{
"cve": "CVE-2021-38022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38022"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38022",
"url": "https://www.suse.com/security/cve/CVE-2021-38022"
},
{
"category": "external",
"summary": "SUSE Bug 1192734 for CVE-2021-38022",
"url": "https://bugzilla.suse.com/1192734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-38022"
},
{
"cve": "CVE-2021-4052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4052"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4052",
"url": "https://www.suse.com/security/cve/CVE-2021-4052"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4052",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4052"
},
{
"cve": "CVE-2021-4053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4053"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4053",
"url": "https://www.suse.com/security/cve/CVE-2021-4053"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4053",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4053"
},
{
"cve": "CVE-2021-4054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4054"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4054",
"url": "https://www.suse.com/security/cve/CVE-2021-4054"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4054",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4054"
},
{
"cve": "CVE-2021-4055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4055"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4055",
"url": "https://www.suse.com/security/cve/CVE-2021-4055"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4055",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4055"
},
{
"cve": "CVE-2021-4056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4056"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4056",
"url": "https://www.suse.com/security/cve/CVE-2021-4056"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4056",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4056"
},
{
"cve": "CVE-2021-4057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4057"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4057",
"url": "https://www.suse.com/security/cve/CVE-2021-4057"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4057",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4057"
},
{
"cve": "CVE-2021-4058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4058"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4058",
"url": "https://www.suse.com/security/cve/CVE-2021-4058"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4058",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4058"
},
{
"cve": "CVE-2021-4059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4059"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4059",
"url": "https://www.suse.com/security/cve/CVE-2021-4059"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4059",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4059"
},
{
"cve": "CVE-2021-4061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4061"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4061",
"url": "https://www.suse.com/security/cve/CVE-2021-4061"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4061",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4061"
},
{
"cve": "CVE-2021-4062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4062"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4062",
"url": "https://www.suse.com/security/cve/CVE-2021-4062"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4062",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4062"
},
{
"cve": "CVE-2021-4063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4063"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4063",
"url": "https://www.suse.com/security/cve/CVE-2021-4063"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4063",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4063"
},
{
"cve": "CVE-2021-4064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4064"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4064",
"url": "https://www.suse.com/security/cve/CVE-2021-4064"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4064",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4064"
},
{
"cve": "CVE-2021-4065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4065"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4065",
"url": "https://www.suse.com/security/cve/CVE-2021-4065"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4065",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4065"
},
{
"cve": "CVE-2021-4066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4066"
}
],
"notes": [
{
"category": "general",
"text": "Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4066",
"url": "https://www.suse.com/security/cve/CVE-2021-4066"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4066",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4066"
},
{
"cve": "CVE-2021-4067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4067"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4067",
"url": "https://www.suse.com/security/cve/CVE-2021-4067"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4067",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4067"
},
{
"cve": "CVE-2021-4068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4068"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4068",
"url": "https://www.suse.com/security/cve/CVE-2021-4068"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4068",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4068"
},
{
"cve": "CVE-2021-4078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4078"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4078",
"url": "https://www.suse.com/security/cve/CVE-2021-4078"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4078",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4078"
},
{
"cve": "CVE-2021-4079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4079"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4079",
"url": "https://www.suse.com/security/cve/CVE-2021-4079"
},
{
"category": "external",
"summary": "SUSE Bug 1193519 for CVE-2021-4079",
"url": "https://bugzilla.suse.com/1193519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4079"
},
{
"cve": "CVE-2021-4098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4098"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4098",
"url": "https://www.suse.com/security/cve/CVE-2021-4098"
},
{
"category": "external",
"summary": "SUSE Bug 1193713 for CVE-2021-4098",
"url": "https://bugzilla.suse.com/1193713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4098"
},
{
"cve": "CVE-2021-4099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4099"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4099",
"url": "https://www.suse.com/security/cve/CVE-2021-4099"
},
{
"category": "external",
"summary": "SUSE Bug 1193713 for CVE-2021-4099",
"url": "https://bugzilla.suse.com/1193713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4099"
},
{
"cve": "CVE-2021-4100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4100"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4100",
"url": "https://www.suse.com/security/cve/CVE-2021-4100"
},
{
"category": "external",
"summary": "SUSE Bug 1193713 for CVE-2021-4100",
"url": "https://bugzilla.suse.com/1193713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4100"
},
{
"cve": "CVE-2021-4101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4101"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4101",
"url": "https://www.suse.com/security/cve/CVE-2021-4101"
},
{
"category": "external",
"summary": "SUSE Bug 1193713 for CVE-2021-4101",
"url": "https://bugzilla.suse.com/1193713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4101"
},
{
"cve": "CVE-2021-4102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4102"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4102",
"url": "https://www.suse.com/security/cve/CVE-2021-4102"
},
{
"category": "external",
"summary": "SUSE Bug 1193713 for CVE-2021-4102",
"url": "https://bugzilla.suse.com/1193713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-4102"
},
{
"cve": "CVE-2022-0096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0096"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0096",
"url": "https://www.suse.com/security/cve/CVE-2022-0096"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0096",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0096",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0096"
},
{
"cve": "CVE-2022-0097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0097"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0097",
"url": "https://www.suse.com/security/cve/CVE-2022-0097"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0097",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0097",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0097"
},
{
"cve": "CVE-2022-0098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0098"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0098",
"url": "https://www.suse.com/security/cve/CVE-2022-0098"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0098",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0098",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0098"
},
{
"cve": "CVE-2022-0099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0099"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0099",
"url": "https://www.suse.com/security/cve/CVE-2022-0099"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0099",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0099",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0099"
},
{
"cve": "CVE-2022-0100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0100"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0100",
"url": "https://www.suse.com/security/cve/CVE-2022-0100"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0100",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0100",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0100"
},
{
"cve": "CVE-2022-0101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0101"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via specific user gesture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0101",
"url": "https://www.suse.com/security/cve/CVE-2022-0101"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0101",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0101",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0101"
},
{
"cve": "CVE-2022-0102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0102"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0102",
"url": "https://www.suse.com/security/cve/CVE-2022-0102"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0102",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0102",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0102"
},
{
"cve": "CVE-2022-0103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0103"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0103",
"url": "https://www.suse.com/security/cve/CVE-2022-0103"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0103",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0103",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0103"
},
{
"cve": "CVE-2022-0104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0104"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0104",
"url": "https://www.suse.com/security/cve/CVE-2022-0104"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0104",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0104",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0104"
},
{
"cve": "CVE-2022-0105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0105"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0105",
"url": "https://www.suse.com/security/cve/CVE-2022-0105"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0105",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0105",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0105"
},
{
"cve": "CVE-2022-0106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0106"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0106",
"url": "https://www.suse.com/security/cve/CVE-2022-0106"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0106",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0106",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0106"
},
{
"cve": "CVE-2022-0107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0107"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0107",
"url": "https://www.suse.com/security/cve/CVE-2022-0107"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0107",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0107",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0107"
},
{
"cve": "CVE-2022-0108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0108"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0108",
"url": "https://www.suse.com/security/cve/CVE-2022-0108"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0108",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1210731 for CVE-2022-0108",
"url": "https://bugzilla.suse.com/1210731"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0108",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0108"
},
{
"cve": "CVE-2022-0109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0109"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0109",
"url": "https://www.suse.com/security/cve/CVE-2022-0109"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0109",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0109",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0109"
},
{
"cve": "CVE-2022-0110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0110"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0110",
"url": "https://www.suse.com/security/cve/CVE-2022-0110"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0110",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0110",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0110"
},
{
"cve": "CVE-2022-0111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0111"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0111",
"url": "https://www.suse.com/security/cve/CVE-2022-0111"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0111",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0111",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0111"
},
{
"cve": "CVE-2022-0112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0112"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0112",
"url": "https://www.suse.com/security/cve/CVE-2022-0112"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0112",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0112",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0112"
},
{
"cve": "CVE-2022-0113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0113"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0113",
"url": "https://www.suse.com/security/cve/CVE-2022-0113"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0113",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0113",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0113"
},
{
"cve": "CVE-2022-0114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0114"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0114",
"url": "https://www.suse.com/security/cve/CVE-2022-0114"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0114",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0114",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0114"
},
{
"cve": "CVE-2022-0115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0115"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0115",
"url": "https://www.suse.com/security/cve/CVE-2022-0115"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0115",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0115",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0115"
},
{
"cve": "CVE-2022-0116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0116"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0116",
"url": "https://www.suse.com/security/cve/CVE-2022-0116"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0116",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0116",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0116"
},
{
"cve": "CVE-2022-0117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0117"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0117",
"url": "https://www.suse.com/security/cve/CVE-2022-0117"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0117",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0117",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0117"
},
{
"cve": "CVE-2022-0118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0118"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0118",
"url": "https://www.suse.com/security/cve/CVE-2022-0118"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0118",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0118",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0118"
},
{
"cve": "CVE-2022-0120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0120"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0120",
"url": "https://www.suse.com/security/cve/CVE-2022-0120"
},
{
"category": "external",
"summary": "SUSE Bug 1194331 for CVE-2022-0120",
"url": "https://bugzilla.suse.com/1194331"
},
{
"category": "external",
"summary": "SUSE Bug 1213802 for CVE-2022-0120",
"url": "https://bugzilla.suse.com/1213802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0120"
},
{
"cve": "CVE-2022-0289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0289"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0289",
"url": "https://www.suse.com/security/cve/CVE-2022-0289"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0289",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0289"
},
{
"cve": "CVE-2022-0290",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0290"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0290",
"url": "https://www.suse.com/security/cve/CVE-2022-0290"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0290",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0290"
},
{
"cve": "CVE-2022-0291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0291"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0291",
"url": "https://www.suse.com/security/cve/CVE-2022-0291"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0291",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0291"
},
{
"cve": "CVE-2022-0292",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0292"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0292",
"url": "https://www.suse.com/security/cve/CVE-2022-0292"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0292",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0292"
},
{
"cve": "CVE-2022-0293",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0293"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0293",
"url": "https://www.suse.com/security/cve/CVE-2022-0293"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0293",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0293"
},
{
"cve": "CVE-2022-0294",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0294"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0294",
"url": "https://www.suse.com/security/cve/CVE-2022-0294"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0294",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0294"
},
{
"cve": "CVE-2022-0295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0295"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0295",
"url": "https://www.suse.com/security/cve/CVE-2022-0295"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0295",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0295"
},
{
"cve": "CVE-2022-0296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0296"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0296",
"url": "https://www.suse.com/security/cve/CVE-2022-0296"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0296",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0296"
},
{
"cve": "CVE-2022-0297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0297"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0297",
"url": "https://www.suse.com/security/cve/CVE-2022-0297"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0297",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0297"
},
{
"cve": "CVE-2022-0298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0298"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0298",
"url": "https://www.suse.com/security/cve/CVE-2022-0298"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0298",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0298"
},
{
"cve": "CVE-2022-0300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0300"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0300",
"url": "https://www.suse.com/security/cve/CVE-2022-0300"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0300",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0300"
},
{
"cve": "CVE-2022-0301",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0301"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0301",
"url": "https://www.suse.com/security/cve/CVE-2022-0301"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0301",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0301"
},
{
"cve": "CVE-2022-0302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0302"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0302",
"url": "https://www.suse.com/security/cve/CVE-2022-0302"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0302",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0302"
},
{
"cve": "CVE-2022-0303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0303"
}
],
"notes": [
{
"category": "general",
"text": "Further investigation determines issue is not a vulnerability",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0303",
"url": "https://www.suse.com/security/cve/CVE-2022-0303"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0303",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0303"
},
{
"cve": "CVE-2022-0304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0304"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0304",
"url": "https://www.suse.com/security/cve/CVE-2022-0304"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0304",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0304"
},
{
"cve": "CVE-2022-0305",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0305"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0305",
"url": "https://www.suse.com/security/cve/CVE-2022-0305"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0305",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0305"
},
{
"cve": "CVE-2022-0306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0306"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0306",
"url": "https://www.suse.com/security/cve/CVE-2022-0306"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0306",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0306"
},
{
"cve": "CVE-2022-0307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0307"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0307",
"url": "https://www.suse.com/security/cve/CVE-2022-0307"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0307",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0307"
},
{
"cve": "CVE-2022-0308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0308"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0308",
"url": "https://www.suse.com/security/cve/CVE-2022-0308"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0308",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0308"
},
{
"cve": "CVE-2022-0309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0309"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0309",
"url": "https://www.suse.com/security/cve/CVE-2022-0309"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0309",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0309"
},
{
"cve": "CVE-2022-0310",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0310"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0310",
"url": "https://www.suse.com/security/cve/CVE-2022-0310"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0310",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0310"
},
{
"cve": "CVE-2022-0311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0311"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0311",
"url": "https://www.suse.com/security/cve/CVE-2022-0311"
},
{
"category": "external",
"summary": "SUSE Bug 1194919 for CVE-2022-0311",
"url": "https://bugzilla.suse.com/1194919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0311"
},
{
"cve": "CVE-2022-0452",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0452"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0452",
"url": "https://www.suse.com/security/cve/CVE-2022-0452"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0452",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0452"
},
{
"cve": "CVE-2022-0453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0453"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0453",
"url": "https://www.suse.com/security/cve/CVE-2022-0453"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0453",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0453"
},
{
"cve": "CVE-2022-0454",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0454"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0454",
"url": "https://www.suse.com/security/cve/CVE-2022-0454"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0454",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0454"
},
{
"cve": "CVE-2022-0455",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0455"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0455",
"url": "https://www.suse.com/security/cve/CVE-2022-0455"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0455",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0455"
},
{
"cve": "CVE-2022-0456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0456"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0456",
"url": "https://www.suse.com/security/cve/CVE-2022-0456"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0456",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0456"
},
{
"cve": "CVE-2022-0457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0457"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0457",
"url": "https://www.suse.com/security/cve/CVE-2022-0457"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0457",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0457"
},
{
"cve": "CVE-2022-0459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0459"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process and convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0459",
"url": "https://www.suse.com/security/cve/CVE-2022-0459"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0459",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0459"
},
{
"cve": "CVE-2022-0460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0460"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0460",
"url": "https://www.suse.com/security/cve/CVE-2022-0460"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0460",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0460"
},
{
"cve": "CVE-2022-0461",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0461"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0461",
"url": "https://www.suse.com/security/cve/CVE-2022-0461"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0461",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0461"
},
{
"cve": "CVE-2022-0462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0462"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0462",
"url": "https://www.suse.com/security/cve/CVE-2022-0462"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0462",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0462"
},
{
"cve": "CVE-2022-0463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0463"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0463",
"url": "https://www.suse.com/security/cve/CVE-2022-0463"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0463",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0463"
},
{
"cve": "CVE-2022-0464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0464"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0464",
"url": "https://www.suse.com/security/cve/CVE-2022-0464"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0464",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0464"
},
{
"cve": "CVE-2022-0465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0465"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0465",
"url": "https://www.suse.com/security/cve/CVE-2022-0465"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0465",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0465"
},
{
"cve": "CVE-2022-0466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0466"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0466",
"url": "https://www.suse.com/security/cve/CVE-2022-0466"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0466",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0466"
},
{
"cve": "CVE-2022-0467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0467"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Pointer Lock in Google Chrome on Windows prior to 98.0.4758.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0467",
"url": "https://www.suse.com/security/cve/CVE-2022-0467"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0467",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0467"
},
{
"cve": "CVE-2022-0468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0468"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0468",
"url": "https://www.suse.com/security/cve/CVE-2022-0468"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0468",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0468"
},
{
"cve": "CVE-2022-0469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0469"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0469",
"url": "https://www.suse.com/security/cve/CVE-2022-0469"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0469",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0469"
},
{
"cve": "CVE-2022-0470",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0470"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0470",
"url": "https://www.suse.com/security/cve/CVE-2022-0470"
},
{
"category": "external",
"summary": "SUSE Bug 1195420 for CVE-2022-0470",
"url": "https://bugzilla.suse.com/1195420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0470"
},
{
"cve": "CVE-2022-0603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0603"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0603",
"url": "https://www.suse.com/security/cve/CVE-2022-0603"
},
{
"category": "external",
"summary": "SUSE Bug 1195986 for CVE-2022-0603",
"url": "https://bugzilla.suse.com/1195986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-0603"
},
{
"cve": "CVE-2022-0604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0604"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0604",
"url": "https://www.suse.com/security/cve/CVE-2022-0604"
},
{
"category": "external",
"summary": "SUSE Bug 1195986 for CVE-2022-0604",
"url": "https://bugzilla.suse.com/1195986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-0604"
},
{
"cve": "CVE-2022-0605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0605"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0605",
"url": "https://www.suse.com/security/cve/CVE-2022-0605"
},
{
"category": "external",
"summary": "SUSE Bug 1195986 for CVE-2022-0605",
"url": "https://bugzilla.suse.com/1195986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-0605"
},
{
"cve": "CVE-2022-0606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0606"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0606",
"url": "https://www.suse.com/security/cve/CVE-2022-0606"
},
{
"category": "external",
"summary": "SUSE Bug 1195986 for CVE-2022-0606",
"url": "https://bugzilla.suse.com/1195986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-0606"
},
{
"cve": "CVE-2022-0607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0607"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0607",
"url": "https://www.suse.com/security/cve/CVE-2022-0607"
},
{
"category": "external",
"summary": "SUSE Bug 1195986 for CVE-2022-0607",
"url": "https://bugzilla.suse.com/1195986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-0607"
},
{
"cve": "CVE-2022-0608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0608"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0608",
"url": "https://www.suse.com/security/cve/CVE-2022-0608"
},
{
"category": "external",
"summary": "SUSE Bug 1195986 for CVE-2022-0608",
"url": "https://bugzilla.suse.com/1195986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-0608"
},
{
"cve": "CVE-2022-0609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0609"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0609",
"url": "https://www.suse.com/security/cve/CVE-2022-0609"
},
{
"category": "external",
"summary": "SUSE Bug 1195986 for CVE-2022-0609",
"url": "https://bugzilla.suse.com/1195986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-0609"
},
{
"cve": "CVE-2022-0610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0610"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0610",
"url": "https://www.suse.com/security/cve/CVE-2022-0610"
},
{
"category": "external",
"summary": "SUSE Bug 1195986 for CVE-2022-0610",
"url": "https://bugzilla.suse.com/1195986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-0610"
},
{
"cve": "CVE-2022-0789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0789"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0789",
"url": "https://www.suse.com/security/cve/CVE-2022-0789"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0789",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0789"
},
{
"cve": "CVE-2022-0790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0790"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0790",
"url": "https://www.suse.com/security/cve/CVE-2022-0790"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0790",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0790"
},
{
"cve": "CVE-2022-0791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0791"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0791",
"url": "https://www.suse.com/security/cve/CVE-2022-0791"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0791",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0791"
},
{
"cve": "CVE-2022-0792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0792"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0792",
"url": "https://www.suse.com/security/cve/CVE-2022-0792"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0792",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0792"
},
{
"cve": "CVE-2022-0793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0793"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0793",
"url": "https://www.suse.com/security/cve/CVE-2022-0793"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0793",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0793"
},
{
"cve": "CVE-2022-0794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0794"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0794",
"url": "https://www.suse.com/security/cve/CVE-2022-0794"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0794",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0794"
},
{
"cve": "CVE-2022-0795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0795"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0795",
"url": "https://www.suse.com/security/cve/CVE-2022-0795"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0795",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0795"
},
{
"cve": "CVE-2022-0796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0796"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0796",
"url": "https://www.suse.com/security/cve/CVE-2022-0796"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0796",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0796"
},
{
"cve": "CVE-2022-0797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0797"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0797",
"url": "https://www.suse.com/security/cve/CVE-2022-0797"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0797",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0797"
},
{
"cve": "CVE-2022-0798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0798"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0798",
"url": "https://www.suse.com/security/cve/CVE-2022-0798"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0798",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0798"
},
{
"cve": "CVE-2022-0799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0799"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0799",
"url": "https://www.suse.com/security/cve/CVE-2022-0799"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0799",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0799"
},
{
"cve": "CVE-2022-0800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0800"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0800",
"url": "https://www.suse.com/security/cve/CVE-2022-0800"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0800",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0800"
},
{
"cve": "CVE-2022-0801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0801"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. (Chrome security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0801",
"url": "https://www.suse.com/security/cve/CVE-2022-0801"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0801",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0801"
},
{
"cve": "CVE-2022-0802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0802"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0802",
"url": "https://www.suse.com/security/cve/CVE-2022-0802"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0802",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0802"
},
{
"cve": "CVE-2022-0803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0803"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0803",
"url": "https://www.suse.com/security/cve/CVE-2022-0803"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0803",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0803"
},
{
"cve": "CVE-2022-0804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0804"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0804",
"url": "https://www.suse.com/security/cve/CVE-2022-0804"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0804",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0804"
},
{
"cve": "CVE-2022-0805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0805"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0805",
"url": "https://www.suse.com/security/cve/CVE-2022-0805"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0805",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0805"
},
{
"cve": "CVE-2022-0806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0806"
}
],
"notes": [
{
"category": "general",
"text": "Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0806",
"url": "https://www.suse.com/security/cve/CVE-2022-0806"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0806",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0806"
},
{
"cve": "CVE-2022-0807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0807"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0807",
"url": "https://www.suse.com/security/cve/CVE-2022-0807"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0807",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0807"
},
{
"cve": "CVE-2022-0808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0808"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of user interaction to potentially exploit heap corruption via user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0808",
"url": "https://www.suse.com/security/cve/CVE-2022-0808"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0808",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0808"
},
{
"cve": "CVE-2022-0809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0809"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0809",
"url": "https://www.suse.com/security/cve/CVE-2022-0809"
},
{
"category": "external",
"summary": "SUSE Bug 1196641 for CVE-2022-0809",
"url": "https://bugzilla.suse.com/1196641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0809"
},
{
"cve": "CVE-2022-0971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0971"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0971",
"url": "https://www.suse.com/security/cve/CVE-2022-0971"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0971",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0971"
},
{
"cve": "CVE-2022-0972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0972"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0972",
"url": "https://www.suse.com/security/cve/CVE-2022-0972"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0972",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0972"
},
{
"cve": "CVE-2022-0973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0973"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0973",
"url": "https://www.suse.com/security/cve/CVE-2022-0973"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0973",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0973"
},
{
"cve": "CVE-2022-0974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0974"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0974",
"url": "https://www.suse.com/security/cve/CVE-2022-0974"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0974",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0974"
},
{
"cve": "CVE-2022-0975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0975"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0975",
"url": "https://www.suse.com/security/cve/CVE-2022-0975"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0975",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0975"
},
{
"cve": "CVE-2022-0976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0976"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0976",
"url": "https://www.suse.com/security/cve/CVE-2022-0976"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0976",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0976"
},
{
"cve": "CVE-2022-0977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0977"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0977",
"url": "https://www.suse.com/security/cve/CVE-2022-0977"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0977",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0977"
},
{
"cve": "CVE-2022-0978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0978"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0978",
"url": "https://www.suse.com/security/cve/CVE-2022-0978"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0978",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0978"
},
{
"cve": "CVE-2022-0979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0979"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0979",
"url": "https://www.suse.com/security/cve/CVE-2022-0979"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0979",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0979"
},
{
"cve": "CVE-2022-0980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0980"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0980",
"url": "https://www.suse.com/security/cve/CVE-2022-0980"
},
{
"category": "external",
"summary": "SUSE Bug 1197163 for CVE-2022-0980",
"url": "https://bugzilla.suse.com/1197163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-0980"
},
{
"cve": "CVE-2022-1096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1096"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1096",
"url": "https://www.suse.com/security/cve/CVE-2022-1096"
},
{
"category": "external",
"summary": "SUSE Bug 1197552 for CVE-2022-1096",
"url": "https://bugzilla.suse.com/1197552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1096"
},
{
"cve": "CVE-2022-1125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1125"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1125",
"url": "https://www.suse.com/security/cve/CVE-2022-1125"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1125",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1125"
},
{
"cve": "CVE-2022-1127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1127"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1127",
"url": "https://www.suse.com/security/cve/CVE-2022-1127"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1127",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1127"
},
{
"cve": "CVE-2022-1128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1128"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1128",
"url": "https://www.suse.com/security/cve/CVE-2022-1128"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1128",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1128"
},
{
"cve": "CVE-2022-1129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1129"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1129",
"url": "https://www.suse.com/security/cve/CVE-2022-1129"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1129",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1129"
},
{
"cve": "CVE-2022-1130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1130"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1130",
"url": "https://www.suse.com/security/cve/CVE-2022-1130"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1130",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1130"
},
{
"cve": "CVE-2022-1131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1131"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast UI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1131",
"url": "https://www.suse.com/security/cve/CVE-2022-1131"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1131",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1131"
},
{
"cve": "CVE-2022-1132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1132"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restrictions via physical access to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1132",
"url": "https://www.suse.com/security/cve/CVE-2022-1132"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1132",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1132"
},
{
"cve": "CVE-2022-1133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1133"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC Perf in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1133",
"url": "https://www.suse.com/security/cve/CVE-2022-1133"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1133",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1133"
},
{
"cve": "CVE-2022-1134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1134"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1134",
"url": "https://www.suse.com/security/cve/CVE-2022-1134"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1134",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1134"
},
{
"cve": "CVE-2022-1135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1135"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Shopping Cart in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via standard feature user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1135",
"url": "https://www.suse.com/security/cve/CVE-2022-1135"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1135",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1135"
},
{
"cve": "CVE-2022-1136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1136"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific set of user gestures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1136",
"url": "https://www.suse.com/security/cve/CVE-2022-1136"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1136",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1136"
},
{
"cve": "CVE-2022-1137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1137"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to leak potentially sensitive information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1137",
"url": "https://www.suse.com/security/cve/CVE-2022-1137"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1137",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1137"
},
{
"cve": "CVE-2022-1138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1138"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1138",
"url": "https://www.suse.com/security/cve/CVE-2022-1138"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1138",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1138"
},
{
"cve": "CVE-2022-1139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1139"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1139",
"url": "https://www.suse.com/security/cve/CVE-2022-1139"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1139",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1139"
},
{
"cve": "CVE-2022-1141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1141"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user gesture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1141",
"url": "https://www.suse.com/security/cve/CVE-2022-1141"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1141",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1141"
},
{
"cve": "CVE-2022-1142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1142"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1142",
"url": "https://www.suse.com/security/cve/CVE-2022-1142"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1142",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1142"
},
{
"cve": "CVE-2022-1143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1143"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1143",
"url": "https://www.suse.com/security/cve/CVE-2022-1143"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1143",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1143"
},
{
"cve": "CVE-2022-1144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1144"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1144",
"url": "https://www.suse.com/security/cve/CVE-2022-1144"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1144",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1144"
},
{
"cve": "CVE-2022-1145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1145"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific user interaction and profile destruction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1145",
"url": "https://www.suse.com/security/cve/CVE-2022-1145"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1145",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1145"
},
{
"cve": "CVE-2022-1146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1146"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1146",
"url": "https://www.suse.com/security/cve/CVE-2022-1146"
},
{
"category": "external",
"summary": "SUSE Bug 1197680 for CVE-2022-1146",
"url": "https://bugzilla.suse.com/1197680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1146"
},
{
"cve": "CVE-2022-1232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1232"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1232",
"url": "https://www.suse.com/security/cve/CVE-2022-1232"
},
{
"category": "external",
"summary": "SUSE Bug 1198053 for CVE-2022-1232",
"url": "https://bugzilla.suse.com/1198053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1232"
},
{
"cve": "CVE-2022-1305",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1305"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1305",
"url": "https://www.suse.com/security/cve/CVE-2022-1305"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1305",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1305"
},
{
"cve": "CVE-2022-1306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1306"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1306",
"url": "https://www.suse.com/security/cve/CVE-2022-1306"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1306",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1306"
},
{
"cve": "CVE-2022-1307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1307"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1307",
"url": "https://www.suse.com/security/cve/CVE-2022-1307"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1307",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1307"
},
{
"cve": "CVE-2022-1308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1308"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1308",
"url": "https://www.suse.com/security/cve/CVE-2022-1308"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1308",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1308"
},
{
"cve": "CVE-2022-1309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1309"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1309",
"url": "https://www.suse.com/security/cve/CVE-2022-1309"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1309",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1309"
},
{
"cve": "CVE-2022-1310",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1310"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1310",
"url": "https://www.suse.com/security/cve/CVE-2022-1310"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1310",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1310"
},
{
"cve": "CVE-2022-1311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1311"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1311",
"url": "https://www.suse.com/security/cve/CVE-2022-1311"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1311",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1311"
},
{
"cve": "CVE-2022-1312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1312"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1312",
"url": "https://www.suse.com/security/cve/CVE-2022-1312"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1312",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1312"
},
{
"cve": "CVE-2022-1313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1313"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1313",
"url": "https://www.suse.com/security/cve/CVE-2022-1313"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1313",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1313"
},
{
"cve": "CVE-2022-1314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1314"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1314",
"url": "https://www.suse.com/security/cve/CVE-2022-1314"
},
{
"category": "external",
"summary": "SUSE Bug 1198361 for CVE-2022-1314",
"url": "https://bugzilla.suse.com/1198361"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1314"
},
{
"cve": "CVE-2022-1364",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1364"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1364",
"url": "https://www.suse.com/security/cve/CVE-2022-1364"
},
{
"category": "external",
"summary": "SUSE Bug 1198509 for CVE-2022-1364",
"url": "https://bugzilla.suse.com/1198509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1364"
},
{
"cve": "CVE-2022-1477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1477"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1477",
"url": "https://www.suse.com/security/cve/CVE-2022-1477"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1477",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1477"
},
{
"cve": "CVE-2022-1478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1478"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1478",
"url": "https://www.suse.com/security/cve/CVE-2022-1478"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1478",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1478"
},
{
"cve": "CVE-2022-1479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1479"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1479",
"url": "https://www.suse.com/security/cve/CVE-2022-1479"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1479",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1479"
},
{
"cve": "CVE-2022-1480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1480"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1480",
"url": "https://www.suse.com/security/cve/CVE-2022-1480"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1480",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1480"
},
{
"cve": "CVE-2022-1481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1481"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1481",
"url": "https://www.suse.com/security/cve/CVE-2022-1481"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1481",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1481"
},
{
"cve": "CVE-2022-1482",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1482"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1482",
"url": "https://www.suse.com/security/cve/CVE-2022-1482"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1482",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1482"
},
{
"cve": "CVE-2022-1483",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1483"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1483",
"url": "https://www.suse.com/security/cve/CVE-2022-1483"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1483",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1483"
},
{
"cve": "CVE-2022-1484",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1484"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1484",
"url": "https://www.suse.com/security/cve/CVE-2022-1484"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1484",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1484"
},
{
"cve": "CVE-2022-1485",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1485"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File System API in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1485",
"url": "https://www.suse.com/security/cve/CVE-2022-1485"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1485",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1485"
},
{
"cve": "CVE-2022-1486",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1486"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1486",
"url": "https://www.suse.com/security/cve/CVE-2022-1486"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1486",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1486"
},
{
"cve": "CVE-2022-1487",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1487"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1487",
"url": "https://www.suse.com/security/cve/CVE-2022-1487"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1487",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1487"
},
{
"cve": "CVE-2022-1488",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1488"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1488",
"url": "https://www.suse.com/security/cve/CVE-2022-1488"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1488",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1488"
},
{
"cve": "CVE-2022-1489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1489"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1489",
"url": "https://www.suse.com/security/cve/CVE-2022-1489"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1489",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1489"
},
{
"cve": "CVE-2022-1490",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1490"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser Switcher in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1490",
"url": "https://www.suse.com/security/cve/CVE-2022-1490"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1490",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1490"
},
{
"cve": "CVE-2022-1491",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1491"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1491",
"url": "https://www.suse.com/security/cve/CVE-2022-1491"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1491",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1491"
},
{
"cve": "CVE-2022-1492",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1492"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1492",
"url": "https://www.suse.com/security/cve/CVE-2022-1492"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1492",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1492"
},
{
"cve": "CVE-2022-1493",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1493"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1493",
"url": "https://www.suse.com/security/cve/CVE-2022-1493"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1493",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1493"
},
{
"cve": "CVE-2022-1494",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1494"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass trusted types policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1494",
"url": "https://www.suse.com/security/cve/CVE-2022-1494"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1494",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1494"
},
{
"cve": "CVE-2022-1495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1495"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1495",
"url": "https://www.suse.com/security/cve/CVE-2022-1495"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1495",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1495"
},
{
"cve": "CVE-2022-1496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1496"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1496",
"url": "https://www.suse.com/security/cve/CVE-2022-1496"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1496",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1496"
},
{
"cve": "CVE-2022-1497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1497"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1497",
"url": "https://www.suse.com/security/cve/CVE-2022-1497"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1497",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1497"
},
{
"cve": "CVE-2022-1498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1498"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in HTML Parser in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1498",
"url": "https://www.suse.com/security/cve/CVE-2022-1498"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1498",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1498"
},
{
"cve": "CVE-2022-1499",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1499"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1499",
"url": "https://www.suse.com/security/cve/CVE-2022-1499"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1499",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1499"
},
{
"cve": "CVE-2022-1500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1500"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1500",
"url": "https://www.suse.com/security/cve/CVE-2022-1500"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1500",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1500"
},
{
"cve": "CVE-2022-1501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1501"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in iframe in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1501",
"url": "https://www.suse.com/security/cve/CVE-2022-1501"
},
{
"category": "external",
"summary": "SUSE Bug 1198917 for CVE-2022-1501",
"url": "https://bugzilla.suse.com/1198917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1501"
},
{
"cve": "CVE-2022-1633",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1633"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1633",
"url": "https://www.suse.com/security/cve/CVE-2022-1633"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1633",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1633"
},
{
"cve": "CVE-2022-1634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1634"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1634",
"url": "https://www.suse.com/security/cve/CVE-2022-1634"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1634",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1634"
},
{
"cve": "CVE-2022-1635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1635"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1635",
"url": "https://www.suse.com/security/cve/CVE-2022-1635"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1635",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1635"
},
{
"cve": "CVE-2022-1636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1636"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1636",
"url": "https://www.suse.com/security/cve/CVE-2022-1636"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1636",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1636"
},
{
"cve": "CVE-2022-1637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1637"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1637",
"url": "https://www.suse.com/security/cve/CVE-2022-1637"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1637",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1637"
},
{
"cve": "CVE-2022-1638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1638"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1638",
"url": "https://www.suse.com/security/cve/CVE-2022-1638"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1638",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1638"
},
{
"cve": "CVE-2022-1639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1639"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1639",
"url": "https://www.suse.com/security/cve/CVE-2022-1639"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1639",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1639"
},
{
"cve": "CVE-2022-1640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1640"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1640",
"url": "https://www.suse.com/security/cve/CVE-2022-1640"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1640",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1640"
},
{
"cve": "CVE-2022-1641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1641"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1641",
"url": "https://www.suse.com/security/cve/CVE-2022-1641"
},
{
"category": "external",
"summary": "SUSE Bug 1199409 for CVE-2022-1641",
"url": "https://bugzilla.suse.com/1199409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-1641"
},
{
"cve": "CVE-2022-1853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1853"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1853",
"url": "https://www.suse.com/security/cve/CVE-2022-1853"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1853",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1853"
},
{
"cve": "CVE-2022-1854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1854"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1854",
"url": "https://www.suse.com/security/cve/CVE-2022-1854"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1854",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1854"
},
{
"cve": "CVE-2022-1855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1855"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1855",
"url": "https://www.suse.com/security/cve/CVE-2022-1855"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1855",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1855"
},
{
"cve": "CVE-2022-1856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1856"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension or specific user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1856",
"url": "https://www.suse.com/security/cve/CVE-2022-1856"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1856",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1856"
},
{
"cve": "CVE-2022-1857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1857"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass file system restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1857",
"url": "https://www.suse.com/security/cve/CVE-2022-1857"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1857",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1857"
},
{
"cve": "CVE-2022-1858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1858"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform an out of bounds memory read via specific user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1858",
"url": "https://www.suse.com/security/cve/CVE-2022-1858"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1858",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1858"
},
{
"cve": "CVE-2022-1859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1859"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1859",
"url": "https://www.suse.com/security/cve/CVE-2022-1859"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1859",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1859"
},
{
"cve": "CVE-2022-1860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1860"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1860",
"url": "https://www.suse.com/security/cve/CVE-2022-1860"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1860",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1860"
},
{
"cve": "CVE-2022-1861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1861"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1861",
"url": "https://www.suse.com/security/cve/CVE-2022-1861"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1861",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1861"
},
{
"cve": "CVE-2022-1862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1862"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass profile restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1862",
"url": "https://www.suse.com/security/cve/CVE-2022-1862"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1862",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1862"
},
{
"cve": "CVE-2022-1863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1863"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tab Groups in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1863",
"url": "https://www.suse.com/security/cve/CVE-2022-1863"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1863",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1863"
},
{
"cve": "CVE-2022-1864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1864"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1864",
"url": "https://www.suse.com/security/cve/CVE-2022-1864"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1864",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1864"
},
{
"cve": "CVE-2022-1865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1865"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1865",
"url": "https://www.suse.com/security/cve/CVE-2022-1865"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1865",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1865"
},
{
"cve": "CVE-2022-1866",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1866"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific user interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1866",
"url": "https://www.suse.com/security/cve/CVE-2022-1866"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1866",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1866"
},
{
"cve": "CVE-2022-1867",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1867"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass same origin policy via a crafted clipboard content.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1867",
"url": "https://www.suse.com/security/cve/CVE-2022-1867"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1867",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1867"
},
{
"cve": "CVE-2022-1868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1868"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1868",
"url": "https://www.suse.com/security/cve/CVE-2022-1868"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1868",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1868"
},
{
"cve": "CVE-2022-1869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1869"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1869",
"url": "https://www.suse.com/security/cve/CVE-2022-1869"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1869",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1869"
},
{
"cve": "CVE-2022-1870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1870"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1870",
"url": "https://www.suse.com/security/cve/CVE-2022-1870"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1870",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1870"
},
{
"cve": "CVE-2022-1871",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1871"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass file system policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1871",
"url": "https://www.suse.com/security/cve/CVE-2022-1871"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1871",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1871"
},
{
"cve": "CVE-2022-1872",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1872"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1872",
"url": "https://www.suse.com/security/cve/CVE-2022-1872"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1872",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1872"
},
{
"cve": "CVE-2022-1873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1873"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1873",
"url": "https://www.suse.com/security/cve/CVE-2022-1873"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1873",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1873"
},
{
"cve": "CVE-2022-1874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1874"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1874",
"url": "https://www.suse.com/security/cve/CVE-2022-1874"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1874",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1874"
},
{
"cve": "CVE-2022-1875",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1875"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1875",
"url": "https://www.suse.com/security/cve/CVE-2022-1875"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1875",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1875"
},
{
"cve": "CVE-2022-1876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1876"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1876",
"url": "https://www.suse.com/security/cve/CVE-2022-1876"
},
{
"category": "external",
"summary": "SUSE Bug 1199893 for CVE-2022-1876",
"url": "https://bugzilla.suse.com/1199893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-1876"
},
{
"cve": "CVE-2022-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2007"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2007",
"url": "https://www.suse.com/security/cve/CVE-2022-2007"
},
{
"category": "external",
"summary": "SUSE Bug 1200423 for CVE-2022-2007",
"url": "https://bugzilla.suse.com/1200423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-2007"
},
{
"cve": "CVE-2022-2008",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2008"
}
],
"notes": [
{
"category": "general",
"text": "Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2008",
"url": "https://www.suse.com/security/cve/CVE-2022-2008"
},
{
"category": "external",
"summary": "SUSE Bug 1200423 for CVE-2022-2008",
"url": "https://bugzilla.suse.com/1200423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-2008"
},
{
"cve": "CVE-2022-2010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2010"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2010",
"url": "https://www.suse.com/security/cve/CVE-2022-2010"
},
{
"category": "external",
"summary": "SUSE Bug 1200423 for CVE-2022-2010",
"url": "https://bugzilla.suse.com/1200423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-2010"
},
{
"cve": "CVE-2022-2011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2011"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2011",
"url": "https://www.suse.com/security/cve/CVE-2022-2011"
},
{
"category": "external",
"summary": "SUSE Bug 1200423 for CVE-2022-2011",
"url": "https://bugzilla.suse.com/1200423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-2011"
},
{
"cve": "CVE-2022-2156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2156"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2156",
"url": "https://www.suse.com/security/cve/CVE-2022-2156"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2156",
"url": "https://bugzilla.suse.com/1200783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2156"
},
{
"cve": "CVE-2022-2157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2157"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2157",
"url": "https://www.suse.com/security/cve/CVE-2022-2157"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2157",
"url": "https://bugzilla.suse.com/1200783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2157"
},
{
"cve": "CVE-2022-2158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2158"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2158",
"url": "https://www.suse.com/security/cve/CVE-2022-2158"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2158",
"url": "https://bugzilla.suse.com/1200783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2158"
},
{
"cve": "CVE-2022-2160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2160"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user\u0027s local files via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2160",
"url": "https://www.suse.com/security/cve/CVE-2022-2160"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2160",
"url": "https://bugzilla.suse.com/1200783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2160"
},
{
"cve": "CVE-2022-2161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2161"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2161",
"url": "https://www.suse.com/security/cve/CVE-2022-2161"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2161",
"url": "https://bugzilla.suse.com/1200783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2161"
},
{
"cve": "CVE-2022-2162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2162"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass file system access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2162",
"url": "https://www.suse.com/security/cve/CVE-2022-2162"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2162",
"url": "https://bugzilla.suse.com/1200783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2162"
},
{
"cve": "CVE-2022-2163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2163"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2163",
"url": "https://www.suse.com/security/cve/CVE-2022-2163"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2163",
"url": "https://bugzilla.suse.com/1200783"
},
{
"category": "external",
"summary": "SUSE Bug 1201679 for CVE-2022-2163",
"url": "https://bugzilla.suse.com/1201679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2163"
},
{
"cve": "CVE-2022-2164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2164"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2164",
"url": "https://www.suse.com/security/cve/CVE-2022-2164"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2164",
"url": "https://bugzilla.suse.com/1200783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2164"
},
{
"cve": "CVE-2022-2165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2165"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2165",
"url": "https://www.suse.com/security/cve/CVE-2022-2165"
},
{
"category": "external",
"summary": "SUSE Bug 1200783 for CVE-2022-2165",
"url": "https://bugzilla.suse.com/1200783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2165"
},
{
"cve": "CVE-2022-2294",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2294"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2294",
"url": "https://www.suse.com/security/cve/CVE-2022-2294"
},
{
"category": "external",
"summary": "SUSE Bug 1201216 for CVE-2022-2294",
"url": "https://bugzilla.suse.com/1201216"
},
{
"category": "external",
"summary": "SUSE Bug 1201980 for CVE-2022-2294",
"url": "https://bugzilla.suse.com/1201980"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2294"
},
{
"cve": "CVE-2022-2295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2295"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2295",
"url": "https://www.suse.com/security/cve/CVE-2022-2295"
},
{
"category": "external",
"summary": "SUSE Bug 1201216 for CVE-2022-2295",
"url": "https://bugzilla.suse.com/1201216"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2295"
},
{
"cve": "CVE-2022-2296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2296"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via direct UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2296",
"url": "https://www.suse.com/security/cve/CVE-2022-2296"
},
{
"category": "external",
"summary": "SUSE Bug 1201216 for CVE-2022-2296",
"url": "https://bugzilla.suse.com/1201216"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2296"
},
{
"cve": "CVE-2022-2477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2477"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2477",
"url": "https://www.suse.com/security/cve/CVE-2022-2477"
},
{
"category": "external",
"summary": "SUSE Bug 1201679 for CVE-2022-2477",
"url": "https://bugzilla.suse.com/1201679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2477"
},
{
"cve": "CVE-2022-2478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2478"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2478",
"url": "https://www.suse.com/security/cve/CVE-2022-2478"
},
{
"category": "external",
"summary": "SUSE Bug 1201679 for CVE-2022-2478",
"url": "https://bugzilla.suse.com/1201679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2478"
},
{
"cve": "CVE-2022-2479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2479"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2479",
"url": "https://www.suse.com/security/cve/CVE-2022-2479"
},
{
"category": "external",
"summary": "SUSE Bug 1201679 for CVE-2022-2479",
"url": "https://bugzilla.suse.com/1201679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2479"
},
{
"cve": "CVE-2022-2480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2480"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2480",
"url": "https://www.suse.com/security/cve/CVE-2022-2480"
},
{
"category": "external",
"summary": "SUSE Bug 1201679 for CVE-2022-2480",
"url": "https://bugzilla.suse.com/1201679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2480"
},
{
"cve": "CVE-2022-2481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2481"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via UI interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2481",
"url": "https://www.suse.com/security/cve/CVE-2022-2481"
},
{
"category": "external",
"summary": "SUSE Bug 1201679 for CVE-2022-2481",
"url": "https://bugzilla.suse.com/1201679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2481"
},
{
"cve": "CVE-2022-2603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2603"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2603",
"url": "https://www.suse.com/security/cve/CVE-2022-2603"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2603"
},
{
"cve": "CVE-2022-2604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2604"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2604",
"url": "https://www.suse.com/security/cve/CVE-2022-2604"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2604",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2604"
},
{
"cve": "CVE-2022-2605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2605"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2605",
"url": "https://www.suse.com/security/cve/CVE-2022-2605"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2605",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2605"
},
{
"cve": "CVE-2022-2606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2606"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2606",
"url": "https://www.suse.com/security/cve/CVE-2022-2606"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2606",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2606"
},
{
"cve": "CVE-2022-2607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2607"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2607",
"url": "https://www.suse.com/security/cve/CVE-2022-2607"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2607",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2607"
},
{
"cve": "CVE-2022-2608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2608"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2608",
"url": "https://www.suse.com/security/cve/CVE-2022-2608"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2608",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2608"
},
{
"cve": "CVE-2022-2609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2609"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2609",
"url": "https://www.suse.com/security/cve/CVE-2022-2609"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2609",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2609"
},
{
"cve": "CVE-2022-2610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2610"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2610",
"url": "https://www.suse.com/security/cve/CVE-2022-2610"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2610",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2610"
},
{
"cve": "CVE-2022-2611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2611"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2611",
"url": "https://www.suse.com/security/cve/CVE-2022-2611"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2611",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2611"
},
{
"cve": "CVE-2022-2612",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2612"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2612",
"url": "https://www.suse.com/security/cve/CVE-2022-2612"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2612",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2612"
},
{
"cve": "CVE-2022-2613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2613"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2613",
"url": "https://www.suse.com/security/cve/CVE-2022-2613"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2613",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2613"
},
{
"cve": "CVE-2022-2614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2614"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2614",
"url": "https://www.suse.com/security/cve/CVE-2022-2614"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2614",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2614"
},
{
"cve": "CVE-2022-2615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2615"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2615",
"url": "https://www.suse.com/security/cve/CVE-2022-2615"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2615",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2615"
},
{
"cve": "CVE-2022-2616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2616"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2616",
"url": "https://www.suse.com/security/cve/CVE-2022-2616"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2616",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2616"
},
{
"cve": "CVE-2022-2617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2617"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2617",
"url": "https://www.suse.com/security/cve/CVE-2022-2617"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2617",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2617"
},
{
"cve": "CVE-2022-2618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2618"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file .",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2618",
"url": "https://www.suse.com/security/cve/CVE-2022-2618"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2618",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2618"
},
{
"cve": "CVE-2022-2619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2619"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2619",
"url": "https://www.suse.com/security/cve/CVE-2022-2619"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2619",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2619"
},
{
"cve": "CVE-2022-2620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2620"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2620",
"url": "https://www.suse.com/security/cve/CVE-2022-2620"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2620",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2620"
},
{
"cve": "CVE-2022-2621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2621"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2621",
"url": "https://www.suse.com/security/cve/CVE-2022-2621"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2621",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2621"
},
{
"cve": "CVE-2022-2622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2622"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2622",
"url": "https://www.suse.com/security/cve/CVE-2022-2622"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2622",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2622"
},
{
"cve": "CVE-2022-2623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2623"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2623",
"url": "https://www.suse.com/security/cve/CVE-2022-2623"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2623",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2623"
},
{
"cve": "CVE-2022-2624",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2624"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2624",
"url": "https://www.suse.com/security/cve/CVE-2022-2624"
},
{
"category": "external",
"summary": "SUSE Bug 1202075 for CVE-2022-2624",
"url": "https://bugzilla.suse.com/1202075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2624"
},
{
"cve": "CVE-2022-2852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2852"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2852",
"url": "https://www.suse.com/security/cve/CVE-2022-2852"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2852",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2852"
},
{
"cve": "CVE-2022-2853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2853"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2853",
"url": "https://www.suse.com/security/cve/CVE-2022-2853"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2853",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2853"
},
{
"cve": "CVE-2022-2854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2854"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2854",
"url": "https://www.suse.com/security/cve/CVE-2022-2854"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2854",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2854"
},
{
"cve": "CVE-2022-2855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2855"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2855",
"url": "https://www.suse.com/security/cve/CVE-2022-2855"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2855",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2855"
},
{
"cve": "CVE-2022-2856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2856"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2856",
"url": "https://www.suse.com/security/cve/CVE-2022-2856"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2856",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2856"
},
{
"cve": "CVE-2022-2857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2857"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2857",
"url": "https://www.suse.com/security/cve/CVE-2022-2857"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2857",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2857"
},
{
"cve": "CVE-2022-2858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2858"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2858",
"url": "https://www.suse.com/security/cve/CVE-2022-2858"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2858",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2858"
},
{
"cve": "CVE-2022-2859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2859"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2859",
"url": "https://www.suse.com/security/cve/CVE-2022-2859"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2859",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2859"
},
{
"cve": "CVE-2022-2860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2860"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2860",
"url": "https://www.suse.com/security/cve/CVE-2022-2860"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2860",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2860"
},
{
"cve": "CVE-2022-2861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2861"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2861",
"url": "https://www.suse.com/security/cve/CVE-2022-2861"
},
{
"category": "external",
"summary": "SUSE Bug 1202509 for CVE-2022-2861",
"url": "https://bugzilla.suse.com/1202509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-2861"
},
{
"cve": "CVE-2022-3038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3038"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3038",
"url": "https://www.suse.com/security/cve/CVE-2022-3038"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3038",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3038"
},
{
"cve": "CVE-2022-3039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3039"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3039",
"url": "https://www.suse.com/security/cve/CVE-2022-3039"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3039",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3039"
},
{
"cve": "CVE-2022-3040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3040"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3040",
"url": "https://www.suse.com/security/cve/CVE-2022-3040"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3040",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3040"
},
{
"cve": "CVE-2022-3041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3041"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3041",
"url": "https://www.suse.com/security/cve/CVE-2022-3041"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3041",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3041"
},
{
"cve": "CVE-2022-3042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3042"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3042",
"url": "https://www.suse.com/security/cve/CVE-2022-3042"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3042",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3042"
},
{
"cve": "CVE-2022-3043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3043"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3043",
"url": "https://www.suse.com/security/cve/CVE-2022-3043"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3043",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3043"
},
{
"cve": "CVE-2022-3044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3044"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3044",
"url": "https://www.suse.com/security/cve/CVE-2022-3044"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3044",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3044"
},
{
"cve": "CVE-2022-3045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3045"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3045",
"url": "https://www.suse.com/security/cve/CVE-2022-3045"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3045",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3045"
},
{
"cve": "CVE-2022-3046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3046"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3046",
"url": "https://www.suse.com/security/cve/CVE-2022-3046"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3046",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3046"
},
{
"cve": "CVE-2022-3047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3047"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3047",
"url": "https://www.suse.com/security/cve/CVE-2022-3047"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3047",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3047"
},
{
"cve": "CVE-2022-3048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3048"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a local attacker to bypass lockscreen navigation restrictions via physical access to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3048",
"url": "https://www.suse.com/security/cve/CVE-2022-3048"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3048",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3048"
},
{
"cve": "CVE-2022-3049",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3049"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3049",
"url": "https://www.suse.com/security/cve/CVE-2022-3049"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3049",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3049"
},
{
"cve": "CVE-2022-3050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3050"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3050",
"url": "https://www.suse.com/security/cve/CVE-2022-3050"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3050",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3050"
},
{
"cve": "CVE-2022-3051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3051"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3051",
"url": "https://www.suse.com/security/cve/CVE-2022-3051"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3051",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3051"
},
{
"cve": "CVE-2022-3052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3052"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3052",
"url": "https://www.suse.com/security/cve/CVE-2022-3052"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3052",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3052"
},
{
"cve": "CVE-2022-3053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3053"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker to restrict user navigation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3053",
"url": "https://www.suse.com/security/cve/CVE-2022-3053"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3053",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3053"
},
{
"cve": "CVE-2022-3054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3054"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3054",
"url": "https://www.suse.com/security/cve/CVE-2022-3054"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3054",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3054"
},
{
"cve": "CVE-2022-3055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3055"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3055",
"url": "https://www.suse.com/security/cve/CVE-2022-3055"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3055",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3055"
},
{
"cve": "CVE-2022-3056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3056"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3056",
"url": "https://www.suse.com/security/cve/CVE-2022-3056"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3056",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3056"
},
{
"cve": "CVE-2022-3057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3057"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3057",
"url": "https://www.suse.com/security/cve/CVE-2022-3057"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3057",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3057"
},
{
"cve": "CVE-2022-3058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3058"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3058",
"url": "https://www.suse.com/security/cve/CVE-2022-3058"
},
{
"category": "external",
"summary": "SUSE Bug 1202964 for CVE-2022-3058",
"url": "https://bugzilla.suse.com/1202964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3058"
},
{
"cve": "CVE-2022-3071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3071"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3071",
"url": "https://www.suse.com/security/cve/CVE-2022-3071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2022-3071"
},
{
"cve": "CVE-2022-3075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3075"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3075",
"url": "https://www.suse.com/security/cve/CVE-2022-3075"
},
{
"category": "external",
"summary": "SUSE Bug 1203102 for CVE-2022-3075",
"url": "https://bugzilla.suse.com/1203102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-3075"
},
{
"cve": "CVE-2022-3195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3195"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3195",
"url": "https://www.suse.com/security/cve/CVE-2022-3195"
},
{
"category": "external",
"summary": "SUSE Bug 1203419 for CVE-2022-3195",
"url": "https://bugzilla.suse.com/1203419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3195"
},
{
"cve": "CVE-2022-3196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3196"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3196",
"url": "https://www.suse.com/security/cve/CVE-2022-3196"
},
{
"category": "external",
"summary": "SUSE Bug 1203419 for CVE-2022-3196",
"url": "https://bugzilla.suse.com/1203419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3196"
},
{
"cve": "CVE-2022-3197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3197"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3197",
"url": "https://www.suse.com/security/cve/CVE-2022-3197"
},
{
"category": "external",
"summary": "SUSE Bug 1203419 for CVE-2022-3197",
"url": "https://bugzilla.suse.com/1203419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3197"
},
{
"cve": "CVE-2022-3198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3198"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3198",
"url": "https://www.suse.com/security/cve/CVE-2022-3198"
},
{
"category": "external",
"summary": "SUSE Bug 1203419 for CVE-2022-3198",
"url": "https://bugzilla.suse.com/1203419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3198"
},
{
"cve": "CVE-2022-3199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3199"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3199",
"url": "https://www.suse.com/security/cve/CVE-2022-3199"
},
{
"category": "external",
"summary": "SUSE Bug 1203419 for CVE-2022-3199",
"url": "https://bugzilla.suse.com/1203419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3199"
},
{
"cve": "CVE-2022-3200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3200"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3200",
"url": "https://www.suse.com/security/cve/CVE-2022-3200"
},
{
"category": "external",
"summary": "SUSE Bug 1203419 for CVE-2022-3200",
"url": "https://bugzilla.suse.com/1203419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3200"
},
{
"cve": "CVE-2022-3201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3201"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3201",
"url": "https://www.suse.com/security/cve/CVE-2022-3201"
},
{
"category": "external",
"summary": "SUSE Bug 1203419 for CVE-2022-3201",
"url": "https://bugzilla.suse.com/1203419"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3201",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3201"
},
{
"cve": "CVE-2022-3304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3304"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3304",
"url": "https://www.suse.com/security/cve/CVE-2022-3304"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3304",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3304"
},
{
"cve": "CVE-2022-3305",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3305"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3305",
"url": "https://www.suse.com/security/cve/CVE-2022-3305"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3305",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3305"
},
{
"cve": "CVE-2022-3306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3306"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3306",
"url": "https://www.suse.com/security/cve/CVE-2022-3306"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3306",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3306"
},
{
"cve": "CVE-2022-3307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3307"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3307",
"url": "https://www.suse.com/security/cve/CVE-2022-3307"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3307",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3307"
},
{
"cve": "CVE-2022-3308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3308"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3308",
"url": "https://www.suse.com/security/cve/CVE-2022-3308"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3308",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3308"
},
{
"cve": "CVE-2022-3309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3309"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3309",
"url": "https://www.suse.com/security/cve/CVE-2022-3309"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3309",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3309"
},
{
"cve": "CVE-2022-3310",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3310"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3310",
"url": "https://www.suse.com/security/cve/CVE-2022-3310"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3310",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3310"
},
{
"cve": "CVE-2022-3311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3311"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3311",
"url": "https://www.suse.com/security/cve/CVE-2022-3311"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3311",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3311"
},
{
"cve": "CVE-2022-3312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3312"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3312",
"url": "https://www.suse.com/security/cve/CVE-2022-3312"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3312",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3312"
},
{
"cve": "CVE-2022-3313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3313"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3313",
"url": "https://www.suse.com/security/cve/CVE-2022-3313"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3313",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3313"
},
{
"cve": "CVE-2022-3314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3314"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3314",
"url": "https://www.suse.com/security/cve/CVE-2022-3314"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3314",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3314"
},
{
"cve": "CVE-2022-3315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3315"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3315",
"url": "https://www.suse.com/security/cve/CVE-2022-3315"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3315",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3315"
},
{
"cve": "CVE-2022-3316",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3316"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3316",
"url": "https://www.suse.com/security/cve/CVE-2022-3316"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3316",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3316"
},
{
"cve": "CVE-2022-3317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3317"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3317",
"url": "https://www.suse.com/security/cve/CVE-2022-3317"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3317",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3317"
},
{
"cve": "CVE-2022-3318",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3318"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3318",
"url": "https://www.suse.com/security/cve/CVE-2022-3318"
},
{
"category": "external",
"summary": "SUSE Bug 1203808 for CVE-2022-3318",
"url": "https://bugzilla.suse.com/1203808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3318"
},
{
"cve": "CVE-2022-3370",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3370"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3370",
"url": "https://www.suse.com/security/cve/CVE-2022-3370"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3370"
},
{
"cve": "CVE-2022-3373",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3373"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3373",
"url": "https://www.suse.com/security/cve/CVE-2022-3373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3373"
},
{
"cve": "CVE-2022-3445",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3445"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3445",
"url": "https://www.suse.com/security/cve/CVE-2022-3445"
},
{
"category": "external",
"summary": "SUSE Bug 1204223 for CVE-2022-3445",
"url": "https://bugzilla.suse.com/1204223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3445"
},
{
"cve": "CVE-2022-3446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3446"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3446",
"url": "https://www.suse.com/security/cve/CVE-2022-3446"
},
{
"category": "external",
"summary": "SUSE Bug 1204223 for CVE-2022-3446",
"url": "https://bugzilla.suse.com/1204223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3446"
},
{
"cve": "CVE-2022-3447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3447"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3447",
"url": "https://www.suse.com/security/cve/CVE-2022-3447"
},
{
"category": "external",
"summary": "SUSE Bug 1204223 for CVE-2022-3447",
"url": "https://bugzilla.suse.com/1204223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3447"
},
{
"cve": "CVE-2022-3448",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3448"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3448",
"url": "https://www.suse.com/security/cve/CVE-2022-3448"
},
{
"category": "external",
"summary": "SUSE Bug 1204223 for CVE-2022-3448",
"url": "https://bugzilla.suse.com/1204223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3448"
},
{
"cve": "CVE-2022-3449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3449"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3449",
"url": "https://www.suse.com/security/cve/CVE-2022-3449"
},
{
"category": "external",
"summary": "SUSE Bug 1204223 for CVE-2022-3449",
"url": "https://bugzilla.suse.com/1204223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3449"
},
{
"cve": "CVE-2022-3450",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3450"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3450",
"url": "https://www.suse.com/security/cve/CVE-2022-3450"
},
{
"category": "external",
"summary": "SUSE Bug 1204223 for CVE-2022-3450",
"url": "https://bugzilla.suse.com/1204223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3450"
},
{
"cve": "CVE-2022-3652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3652"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3652",
"url": "https://www.suse.com/security/cve/CVE-2022-3652"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3652",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3652"
},
{
"cve": "CVE-2022-3653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3653"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3653",
"url": "https://www.suse.com/security/cve/CVE-2022-3653"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3653",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3653"
},
{
"cve": "CVE-2022-3654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3654"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3654",
"url": "https://www.suse.com/security/cve/CVE-2022-3654"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3654",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3654"
},
{
"cve": "CVE-2022-3655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3655"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3655",
"url": "https://www.suse.com/security/cve/CVE-2022-3655"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3655",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3655"
},
{
"cve": "CVE-2022-3656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3656"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3656",
"url": "https://www.suse.com/security/cve/CVE-2022-3656"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3656",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3656"
},
{
"cve": "CVE-2022-3657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3657"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3657",
"url": "https://www.suse.com/security/cve/CVE-2022-3657"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3657",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3657"
},
{
"cve": "CVE-2022-3658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3658"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3658",
"url": "https://www.suse.com/security/cve/CVE-2022-3658"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3658",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3658"
},
{
"cve": "CVE-2022-3659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3659"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3659",
"url": "https://www.suse.com/security/cve/CVE-2022-3659"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3659",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3659"
},
{
"cve": "CVE-2022-3660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3660"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3660",
"url": "https://www.suse.com/security/cve/CVE-2022-3660"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3660",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3660"
},
{
"cve": "CVE-2022-3661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3661"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3661",
"url": "https://www.suse.com/security/cve/CVE-2022-3661"
},
{
"category": "external",
"summary": "SUSE Bug 1204732 for CVE-2022-3661",
"url": "https://bugzilla.suse.com/1204732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3661"
},
{
"cve": "CVE-2022-3723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3723"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3723",
"url": "https://www.suse.com/security/cve/CVE-2022-3723"
},
{
"category": "external",
"summary": "SUSE Bug 1204819 for CVE-2022-3723",
"url": "https://bugzilla.suse.com/1204819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3723"
},
{
"cve": "CVE-2022-3885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3885"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3885",
"url": "https://www.suse.com/security/cve/CVE-2022-3885"
},
{
"category": "external",
"summary": "SUSE Bug 1205221 for CVE-2022-3885",
"url": "https://bugzilla.suse.com/1205221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-3885"
},
{
"cve": "CVE-2022-3886",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3886"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3886",
"url": "https://www.suse.com/security/cve/CVE-2022-3886"
},
{
"category": "external",
"summary": "SUSE Bug 1205221 for CVE-2022-3886",
"url": "https://bugzilla.suse.com/1205221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-3886"
},
{
"cve": "CVE-2022-3887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3887"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3887",
"url": "https://www.suse.com/security/cve/CVE-2022-3887"
},
{
"category": "external",
"summary": "SUSE Bug 1205221 for CVE-2022-3887",
"url": "https://bugzilla.suse.com/1205221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-3887"
},
{
"cve": "CVE-2022-3888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3888"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3888",
"url": "https://www.suse.com/security/cve/CVE-2022-3888"
},
{
"category": "external",
"summary": "SUSE Bug 1205221 for CVE-2022-3888",
"url": "https://bugzilla.suse.com/1205221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-3888"
},
{
"cve": "CVE-2022-3889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3889"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3889",
"url": "https://www.suse.com/security/cve/CVE-2022-3889"
},
{
"category": "external",
"summary": "SUSE Bug 1205221 for CVE-2022-3889",
"url": "https://bugzilla.suse.com/1205221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-3889"
},
{
"cve": "CVE-2022-3890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3890"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3890",
"url": "https://www.suse.com/security/cve/CVE-2022-3890"
},
{
"category": "external",
"summary": "SUSE Bug 1205221 for CVE-2022-3890",
"url": "https://bugzilla.suse.com/1205221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-3890"
},
{
"cve": "CVE-2022-4135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4135"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4135",
"url": "https://www.suse.com/security/cve/CVE-2022-4135"
},
{
"category": "external",
"summary": "SUSE Bug 1205736 for CVE-2022-4135",
"url": "https://bugzilla.suse.com/1205736"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-4135"
},
{
"cve": "CVE-2022-4174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4174"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4174",
"url": "https://www.suse.com/security/cve/CVE-2022-4174"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4174",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4174"
},
{
"cve": "CVE-2022-4175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4175"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4175",
"url": "https://www.suse.com/security/cve/CVE-2022-4175"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4175",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4175"
},
{
"cve": "CVE-2022-4176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4176"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4176",
"url": "https://www.suse.com/security/cve/CVE-2022-4176"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4176",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4176"
},
{
"cve": "CVE-2022-4177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4177"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a crafted Chrome Extension and UI interaction. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4177",
"url": "https://www.suse.com/security/cve/CVE-2022-4177"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4177",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4177"
},
{
"cve": "CVE-2022-4178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4178"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4178",
"url": "https://www.suse.com/security/cve/CVE-2022-4178"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4178",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4178"
},
{
"cve": "CVE-2022-4179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4179"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4179",
"url": "https://www.suse.com/security/cve/CVE-2022-4179"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4179",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4179"
},
{
"cve": "CVE-2022-4180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4180"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4180",
"url": "https://www.suse.com/security/cve/CVE-2022-4180"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4180",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4180"
},
{
"cve": "CVE-2022-4181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4181"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4181",
"url": "https://www.suse.com/security/cve/CVE-2022-4181"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4181",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4181"
},
{
"cve": "CVE-2022-4182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4182"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4182",
"url": "https://www.suse.com/security/cve/CVE-2022-4182"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4182",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4182"
},
{
"cve": "CVE-2022-4183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4183"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4183",
"url": "https://www.suse.com/security/cve/CVE-2022-4183"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4183",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4183"
},
{
"cve": "CVE-2022-4184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4184"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4184",
"url": "https://www.suse.com/security/cve/CVE-2022-4184"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4184",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4184"
},
{
"cve": "CVE-2022-4185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4185"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4185",
"url": "https://www.suse.com/security/cve/CVE-2022-4185"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4185",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4185"
},
{
"cve": "CVE-2022-4186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4186"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4186",
"url": "https://www.suse.com/security/cve/CVE-2022-4186"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4186",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4186"
},
{
"cve": "CVE-2022-4187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4187"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4187",
"url": "https://www.suse.com/security/cve/CVE-2022-4187"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4187",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4187"
},
{
"cve": "CVE-2022-4188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4188"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4188",
"url": "https://www.suse.com/security/cve/CVE-2022-4188"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4188",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4188"
},
{
"cve": "CVE-2022-4189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4189"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4189",
"url": "https://www.suse.com/security/cve/CVE-2022-4189"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4189",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4189"
},
{
"cve": "CVE-2022-4190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4190"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4190",
"url": "https://www.suse.com/security/cve/CVE-2022-4190"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4190",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4190"
},
{
"cve": "CVE-2022-4191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4191"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4191",
"url": "https://www.suse.com/security/cve/CVE-2022-4191"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4191",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4191"
},
{
"cve": "CVE-2022-4192",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4192"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4192",
"url": "https://www.suse.com/security/cve/CVE-2022-4192"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4192",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4192"
},
{
"cve": "CVE-2022-4193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4193"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4193",
"url": "https://www.suse.com/security/cve/CVE-2022-4193"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4193",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4193"
},
{
"cve": "CVE-2022-4194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4194"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4194",
"url": "https://www.suse.com/security/cve/CVE-2022-4194"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4194",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4194"
},
{
"cve": "CVE-2022-4195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4195"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4195",
"url": "https://www.suse.com/security/cve/CVE-2022-4195"
},
{
"category": "external",
"summary": "SUSE Bug 1205871 for CVE-2022-4195",
"url": "https://bugzilla.suse.com/1205871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4195"
},
{
"cve": "CVE-2022-4262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4262"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4262",
"url": "https://www.suse.com/security/cve/CVE-2022-4262"
},
{
"category": "external",
"summary": "SUSE Bug 1205999 for CVE-2022-4262",
"url": "https://bugzilla.suse.com/1205999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4262"
},
{
"cve": "CVE-2022-4436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4436"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4436",
"url": "https://www.suse.com/security/cve/CVE-2022-4436"
},
{
"category": "external",
"summary": "SUSE Bug 1206403 for CVE-2022-4436",
"url": "https://bugzilla.suse.com/1206403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4436"
},
{
"cve": "CVE-2022-4437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4437"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4437",
"url": "https://www.suse.com/security/cve/CVE-2022-4437"
},
{
"category": "external",
"summary": "SUSE Bug 1206403 for CVE-2022-4437",
"url": "https://bugzilla.suse.com/1206403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4437"
},
{
"cve": "CVE-2022-4438",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4438"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4438",
"url": "https://www.suse.com/security/cve/CVE-2022-4438"
},
{
"category": "external",
"summary": "SUSE Bug 1206403 for CVE-2022-4438",
"url": "https://bugzilla.suse.com/1206403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4438"
},
{
"cve": "CVE-2022-4439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4439"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4439",
"url": "https://www.suse.com/security/cve/CVE-2022-4439"
},
{
"category": "external",
"summary": "SUSE Bug 1206403 for CVE-2022-4439",
"url": "https://bugzilla.suse.com/1206403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4439"
},
{
"cve": "CVE-2022-4440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-4440"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-4440",
"url": "https://www.suse.com/security/cve/CVE-2022-4440"
},
{
"category": "external",
"summary": "SUSE Bug 1206403 for CVE-2022-4440",
"url": "https://bugzilla.suse.com/1206403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-4440"
},
{
"cve": "CVE-2023-0128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0128"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0128",
"url": "https://www.suse.com/security/cve/CVE-2023-0128"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0128",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0128"
},
{
"cve": "CVE-2023-0129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0129"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0129",
"url": "https://www.suse.com/security/cve/CVE-2023-0129"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0129",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0129"
},
{
"cve": "CVE-2023-0130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0130"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0130",
"url": "https://www.suse.com/security/cve/CVE-2023-0130"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0130",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0130"
},
{
"cve": "CVE-2023-0131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0131"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0131",
"url": "https://www.suse.com/security/cve/CVE-2023-0131"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0131",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0131"
},
{
"cve": "CVE-2023-0132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0132"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0132",
"url": "https://www.suse.com/security/cve/CVE-2023-0132"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0132",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0132"
},
{
"cve": "CVE-2023-0133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0133"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0133",
"url": "https://www.suse.com/security/cve/CVE-2023-0133"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0133",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0133"
},
{
"cve": "CVE-2023-0134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0134"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0134",
"url": "https://www.suse.com/security/cve/CVE-2023-0134"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0134",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0134"
},
{
"cve": "CVE-2023-0135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0135"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0135",
"url": "https://www.suse.com/security/cve/CVE-2023-0135"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0135",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0135"
},
{
"cve": "CVE-2023-0136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0136"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0136",
"url": "https://www.suse.com/security/cve/CVE-2023-0136"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0136",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0136"
},
{
"cve": "CVE-2023-0137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0137"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0137",
"url": "https://www.suse.com/security/cve/CVE-2023-0137"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0137",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0137"
},
{
"cve": "CVE-2023-0138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0138"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0138",
"url": "https://www.suse.com/security/cve/CVE-2023-0138"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0138",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0138"
},
{
"cve": "CVE-2023-0139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0139"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0139",
"url": "https://www.suse.com/security/cve/CVE-2023-0139"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0139",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0139"
},
{
"cve": "CVE-2023-0140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0140"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0140",
"url": "https://www.suse.com/security/cve/CVE-2023-0140"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0140",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0140"
},
{
"cve": "CVE-2023-0141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0141"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0141",
"url": "https://www.suse.com/security/cve/CVE-2023-0141"
},
{
"category": "external",
"summary": "SUSE Bug 1207018 for CVE-2023-0141",
"url": "https://bugzilla.suse.com/1207018"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0141"
},
{
"cve": "CVE-2023-0471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0471"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0471",
"url": "https://www.suse.com/security/cve/CVE-2023-0471"
},
{
"category": "external",
"summary": "SUSE Bug 1207512 for CVE-2023-0471",
"url": "https://bugzilla.suse.com/1207512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0471"
},
{
"cve": "CVE-2023-0472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0472"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0472",
"url": "https://www.suse.com/security/cve/CVE-2023-0472"
},
{
"category": "external",
"summary": "SUSE Bug 1207512 for CVE-2023-0472",
"url": "https://bugzilla.suse.com/1207512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0472"
},
{
"cve": "CVE-2023-0473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0473"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0473",
"url": "https://www.suse.com/security/cve/CVE-2023-0473"
},
{
"category": "external",
"summary": "SUSE Bug 1207512 for CVE-2023-0473",
"url": "https://bugzilla.suse.com/1207512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0473"
},
{
"cve": "CVE-2023-0474",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0474"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0474",
"url": "https://www.suse.com/security/cve/CVE-2023-0474"
},
{
"category": "external",
"summary": "SUSE Bug 1207512 for CVE-2023-0474",
"url": "https://bugzilla.suse.com/1207512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0474"
},
{
"cve": "CVE-2023-0696",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0696"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0696",
"url": "https://www.suse.com/security/cve/CVE-2023-0696"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0696",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0696"
},
{
"cve": "CVE-2023-0697",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0697"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0697",
"url": "https://www.suse.com/security/cve/CVE-2023-0697"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0697",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0697"
},
{
"cve": "CVE-2023-0698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0698"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0698",
"url": "https://www.suse.com/security/cve/CVE-2023-0698"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0698",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0698"
},
{
"cve": "CVE-2023-0699",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0699"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and browser shutdown. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0699",
"url": "https://www.suse.com/security/cve/CVE-2023-0699"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0699",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0699"
},
{
"cve": "CVE-2023-0700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0700"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0700",
"url": "https://www.suse.com/security/cve/CVE-2023-0700"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0700",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0700"
},
{
"cve": "CVE-2023-0701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0701"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0701",
"url": "https://www.suse.com/security/cve/CVE-2023-0701"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0701",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0701"
},
{
"cve": "CVE-2023-0702",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0702"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0702",
"url": "https://www.suse.com/security/cve/CVE-2023-0702"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0702",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0702"
},
{
"cve": "CVE-2023-0703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0703"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0703",
"url": "https://www.suse.com/security/cve/CVE-2023-0703"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0703",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0703"
},
{
"cve": "CVE-2023-0704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0704"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0704",
"url": "https://www.suse.com/security/cve/CVE-2023-0704"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0704",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0704"
},
{
"cve": "CVE-2023-0705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0705"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0705",
"url": "https://www.suse.com/security/cve/CVE-2023-0705"
},
{
"category": "external",
"summary": "SUSE Bug 1208029 for CVE-2023-0705",
"url": "https://bugzilla.suse.com/1208029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0705"
},
{
"cve": "CVE-2023-0927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0927"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0927",
"url": "https://www.suse.com/security/cve/CVE-2023-0927"
},
{
"category": "external",
"summary": "SUSE Bug 1208589 for CVE-2023-0927",
"url": "https://bugzilla.suse.com/1208589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0927"
},
{
"cve": "CVE-2023-0928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0928"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0928",
"url": "https://www.suse.com/security/cve/CVE-2023-0928"
},
{
"category": "external",
"summary": "SUSE Bug 1208589 for CVE-2023-0928",
"url": "https://bugzilla.suse.com/1208589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0928"
},
{
"cve": "CVE-2023-0929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0929"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0929",
"url": "https://www.suse.com/security/cve/CVE-2023-0929"
},
{
"category": "external",
"summary": "SUSE Bug 1208589 for CVE-2023-0929",
"url": "https://bugzilla.suse.com/1208589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0929"
},
{
"cve": "CVE-2023-0930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0930"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0930",
"url": "https://www.suse.com/security/cve/CVE-2023-0930"
},
{
"category": "external",
"summary": "SUSE Bug 1208589 for CVE-2023-0930",
"url": "https://bugzilla.suse.com/1208589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0930"
},
{
"cve": "CVE-2023-0931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0931"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0931",
"url": "https://www.suse.com/security/cve/CVE-2023-0931"
},
{
"category": "external",
"summary": "SUSE Bug 1208589 for CVE-2023-0931",
"url": "https://bugzilla.suse.com/1208589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0931"
},
{
"cve": "CVE-2023-0932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0932"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0932",
"url": "https://www.suse.com/security/cve/CVE-2023-0932"
},
{
"category": "external",
"summary": "SUSE Bug 1208589 for CVE-2023-0932",
"url": "https://bugzilla.suse.com/1208589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0932"
},
{
"cve": "CVE-2023-0933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0933"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0933",
"url": "https://www.suse.com/security/cve/CVE-2023-0933"
},
{
"category": "external",
"summary": "SUSE Bug 1208589 for CVE-2023-0933",
"url": "https://bugzilla.suse.com/1208589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0933"
},
{
"cve": "CVE-2023-0941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-0941"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-0941",
"url": "https://www.suse.com/security/cve/CVE-2023-0941"
},
{
"category": "external",
"summary": "SUSE Bug 1208589 for CVE-2023-0941",
"url": "https://bugzilla.suse.com/1208589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-0941"
},
{
"cve": "CVE-2023-1213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1213"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1213",
"url": "https://www.suse.com/security/cve/CVE-2023-1213"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1213",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1213"
},
{
"cve": "CVE-2023-1214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1214"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1214",
"url": "https://www.suse.com/security/cve/CVE-2023-1214"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1214",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1214"
},
{
"cve": "CVE-2023-1215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1215"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1215",
"url": "https://www.suse.com/security/cve/CVE-2023-1215"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1215",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1215"
},
{
"cve": "CVE-2023-1216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1216"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1216",
"url": "https://www.suse.com/security/cve/CVE-2023-1216"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1216",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1216"
},
{
"cve": "CVE-2023-1217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1217"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1217",
"url": "https://www.suse.com/security/cve/CVE-2023-1217"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1217",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1217"
},
{
"cve": "CVE-2023-1218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1218"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1218",
"url": "https://www.suse.com/security/cve/CVE-2023-1218"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1218",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1218"
},
{
"cve": "CVE-2023-1219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1219"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1219",
"url": "https://www.suse.com/security/cve/CVE-2023-1219"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1219",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1219"
},
{
"cve": "CVE-2023-1220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1220"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1220",
"url": "https://www.suse.com/security/cve/CVE-2023-1220"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1220",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1220"
},
{
"cve": "CVE-2023-1221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1221"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1221",
"url": "https://www.suse.com/security/cve/CVE-2023-1221"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1221",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1221"
},
{
"cve": "CVE-2023-1222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1222"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1222",
"url": "https://www.suse.com/security/cve/CVE-2023-1222"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1222",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1222"
},
{
"cve": "CVE-2023-1223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1223"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1223",
"url": "https://www.suse.com/security/cve/CVE-2023-1223"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1223",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1223"
},
{
"cve": "CVE-2023-1224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1224"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1224",
"url": "https://www.suse.com/security/cve/CVE-2023-1224"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1224",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1224"
},
{
"cve": "CVE-2023-1225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1225"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1225",
"url": "https://www.suse.com/security/cve/CVE-2023-1225"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1225",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1225"
},
{
"cve": "CVE-2023-1226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1226"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1226",
"url": "https://www.suse.com/security/cve/CVE-2023-1226"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1226",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1226"
},
{
"cve": "CVE-2023-1227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1227"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1227",
"url": "https://www.suse.com/security/cve/CVE-2023-1227"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1227",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1227"
},
{
"cve": "CVE-2023-1228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1228"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1228",
"url": "https://www.suse.com/security/cve/CVE-2023-1228"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1228",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1228"
},
{
"cve": "CVE-2023-1229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1229"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1229",
"url": "https://www.suse.com/security/cve/CVE-2023-1229"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1229",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1229"
},
{
"cve": "CVE-2023-1230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1230"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1230",
"url": "https://www.suse.com/security/cve/CVE-2023-1230"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1230",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1230"
},
{
"cve": "CVE-2023-1231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1231"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1231",
"url": "https://www.suse.com/security/cve/CVE-2023-1231"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1231",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1231"
},
{
"cve": "CVE-2023-1232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1232"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1232",
"url": "https://www.suse.com/security/cve/CVE-2023-1232"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1232",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1232"
},
{
"cve": "CVE-2023-1233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1233"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1233",
"url": "https://www.suse.com/security/cve/CVE-2023-1233"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1233",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1233"
},
{
"cve": "CVE-2023-1234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1234"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1234",
"url": "https://www.suse.com/security/cve/CVE-2023-1234"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1234",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1234"
},
{
"cve": "CVE-2023-1235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1235"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1235",
"url": "https://www.suse.com/security/cve/CVE-2023-1235"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1235",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1235"
},
{
"cve": "CVE-2023-1236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1236"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1236",
"url": "https://www.suse.com/security/cve/CVE-2023-1236"
},
{
"category": "external",
"summary": "SUSE Bug 1209040 for CVE-2023-1236",
"url": "https://bugzilla.suse.com/1209040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1236"
},
{
"cve": "CVE-2023-1528",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1528"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1528",
"url": "https://www.suse.com/security/cve/CVE-2023-1528"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1528",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-1528"
},
{
"cve": "CVE-2023-1529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1529"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1529",
"url": "https://www.suse.com/security/cve/CVE-2023-1529"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1529",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-1529"
},
{
"cve": "CVE-2023-1530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1530"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1530",
"url": "https://www.suse.com/security/cve/CVE-2023-1530"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1530",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-1530"
},
{
"cve": "CVE-2023-1531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1531"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1531",
"url": "https://www.suse.com/security/cve/CVE-2023-1531"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1531",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-1531"
},
{
"cve": "CVE-2023-1532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1532"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1532",
"url": "https://www.suse.com/security/cve/CVE-2023-1532"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1532",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-1532"
},
{
"cve": "CVE-2023-1533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1533"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1533",
"url": "https://www.suse.com/security/cve/CVE-2023-1533"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1533",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-1533"
},
{
"cve": "CVE-2023-1534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1534"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1534",
"url": "https://www.suse.com/security/cve/CVE-2023-1534"
},
{
"category": "external",
"summary": "SUSE Bug 1209598 for CVE-2023-1534",
"url": "https://bugzilla.suse.com/1209598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-1534"
},
{
"cve": "CVE-2023-1810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1810"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1810",
"url": "https://www.suse.com/security/cve/CVE-2023-1810"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1810",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1810"
},
{
"cve": "CVE-2023-1811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1811"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1811",
"url": "https://www.suse.com/security/cve/CVE-2023-1811"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1811",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1811"
},
{
"cve": "CVE-2023-1812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1812"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1812",
"url": "https://www.suse.com/security/cve/CVE-2023-1812"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1812",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1812"
},
{
"cve": "CVE-2023-1813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1813"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1813",
"url": "https://www.suse.com/security/cve/CVE-2023-1813"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1813",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1813"
},
{
"cve": "CVE-2023-1814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1814"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1814",
"url": "https://www.suse.com/security/cve/CVE-2023-1814"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1814",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1814"
},
{
"cve": "CVE-2023-1815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1815"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1815",
"url": "https://www.suse.com/security/cve/CVE-2023-1815"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1815",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1815"
},
{
"cve": "CVE-2023-1816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1816"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1816",
"url": "https://www.suse.com/security/cve/CVE-2023-1816"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1816",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1816"
},
{
"cve": "CVE-2023-1817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1817"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1817",
"url": "https://www.suse.com/security/cve/CVE-2023-1817"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1817",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1817"
},
{
"cve": "CVE-2023-1818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1818"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1818",
"url": "https://www.suse.com/security/cve/CVE-2023-1818"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1818",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1818"
},
{
"cve": "CVE-2023-1819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1819"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1819",
"url": "https://www.suse.com/security/cve/CVE-2023-1819"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1819",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1819"
},
{
"cve": "CVE-2023-1820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1820"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1820",
"url": "https://www.suse.com/security/cve/CVE-2023-1820"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1820",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1820"
},
{
"cve": "CVE-2023-1821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1821"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1821",
"url": "https://www.suse.com/security/cve/CVE-2023-1821"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1821",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1821"
},
{
"cve": "CVE-2023-1822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1822"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1822",
"url": "https://www.suse.com/security/cve/CVE-2023-1822"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1822",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1822"
},
{
"cve": "CVE-2023-1823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1823"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1823",
"url": "https://www.suse.com/security/cve/CVE-2023-1823"
},
{
"category": "external",
"summary": "SUSE Bug 1210126 for CVE-2023-1823",
"url": "https://bugzilla.suse.com/1210126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1823"
},
{
"cve": "CVE-2023-2033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2033"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2033",
"url": "https://www.suse.com/security/cve/CVE-2023-2033"
},
{
"category": "external",
"summary": "SUSE Bug 1210478 for CVE-2023-2033",
"url": "https://bugzilla.suse.com/1210478"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2033"
},
{
"cve": "CVE-2023-2133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2133"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2133",
"url": "https://www.suse.com/security/cve/CVE-2023-2133"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2133",
"url": "https://bugzilla.suse.com/1210618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-2133"
},
{
"cve": "CVE-2023-2134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2134"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2134",
"url": "https://www.suse.com/security/cve/CVE-2023-2134"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2134",
"url": "https://bugzilla.suse.com/1210618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-2134"
},
{
"cve": "CVE-2023-2135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2135"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2135",
"url": "https://www.suse.com/security/cve/CVE-2023-2135"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2135",
"url": "https://bugzilla.suse.com/1210618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-2135"
},
{
"cve": "CVE-2023-2136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2136"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2136",
"url": "https://www.suse.com/security/cve/CVE-2023-2136"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2136",
"url": "https://bugzilla.suse.com/1210618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2023-2136"
},
{
"cve": "CVE-2023-2137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2137"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2137",
"url": "https://www.suse.com/security/cve/CVE-2023-2137"
},
{
"category": "external",
"summary": "SUSE Bug 1210618 for CVE-2023-2137",
"url": "https://bugzilla.suse.com/1210618"
},
{
"category": "external",
"summary": "SUSE Bug 1210660 for CVE-2023-2137",
"url": "https://bugzilla.suse.com/1210660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2137"
},
{
"cve": "CVE-2023-2459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2459"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2459",
"url": "https://www.suse.com/security/cve/CVE-2023-2459"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2459",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2459"
},
{
"cve": "CVE-2023-2460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2460"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2460",
"url": "https://www.suse.com/security/cve/CVE-2023-2460"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2460",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2460"
},
{
"cve": "CVE-2023-2461",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2461"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2461",
"url": "https://www.suse.com/security/cve/CVE-2023-2461"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2461",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2461"
},
{
"cve": "CVE-2023-2462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2462"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2462",
"url": "https://www.suse.com/security/cve/CVE-2023-2462"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2462",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2462"
},
{
"cve": "CVE-2023-2463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2463"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2463",
"url": "https://www.suse.com/security/cve/CVE-2023-2463"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2463",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2463"
},
{
"cve": "CVE-2023-2464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2464"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to perform an origin spoof in the security UI via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2464",
"url": "https://www.suse.com/security/cve/CVE-2023-2464"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2464",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2464"
},
{
"cve": "CVE-2023-2465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2465"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2465",
"url": "https://www.suse.com/security/cve/CVE-2023-2465"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2465",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2465"
},
{
"cve": "CVE-2023-2466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2466"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2466",
"url": "https://www.suse.com/security/cve/CVE-2023-2466"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2466",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2466"
},
{
"cve": "CVE-2023-2467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2467"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2467",
"url": "https://www.suse.com/security/cve/CVE-2023-2467"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2467",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2467"
},
{
"cve": "CVE-2023-2468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2468"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscate the security UI via a crafted HTML page. (Chromium security severity: Low)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2468",
"url": "https://www.suse.com/security/cve/CVE-2023-2468"
},
{
"category": "external",
"summary": "SUSE Bug 1211036 for CVE-2023-2468",
"url": "https://bugzilla.suse.com/1211036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-113.0.5672.92-1.1.x86_64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.aarch64",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.ppc64le",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.s390x",
"openSUSE Tumbleweed:ungoogled-chromium-chromedriver-113.0.5672.92-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2468"
}
]
}
opensuse-su-2024:10601-1
Vulnerability from csaf_opensuse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "MozillaThunderbird-91.1.1-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10601",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10601-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3089 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3285 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3656 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3670 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3734 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3734/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3735 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3735/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3736 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3736/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3737 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3737/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-3738 page",
"url": "https://www.suse.com/security/cve/CVE-2007-3738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-0016 page",
"url": "https://www.suse.com/security/cve/CVE-2008-0016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1233 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1236 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-3835 page",
"url": "https://www.suse.com/security/cve/CVE-2008-3835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4058 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4061 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4064 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4065 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4067 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4070 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5012 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5014 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5016 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5021 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5022 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5024 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5500 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5503 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5506 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5507 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5507/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5508 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5510 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-5511 page",
"url": "https://www.suse.com/security/cve/CVE-2008-5511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5824 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9893 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9895 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9895/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9897 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9898 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9898/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9899 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9900 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9904 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9905 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-16541 page",
"url": "https://www.suse.com/security/cve/CVE-2017-16541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5373 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5373/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5375 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5375/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5376 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5376/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5378 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5378/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5380 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5380/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5383 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5390 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5396 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5396/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5398 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5399 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5400 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5400/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5401 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5402 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5403 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5404 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5405 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5406 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5407 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5408 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5410 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5412 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5413 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5413/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5414 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5414/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5416 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5416/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5418 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5419 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5421 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5421/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5422 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5426 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5429 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5430 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5432 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5432/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5433 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5433/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5434 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5434/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5435 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5436 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5437 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5438 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5438/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5439 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5440 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5441 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5442 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5442/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5443 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5443/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5444 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5444/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5445 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5445/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5446 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5447 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5449 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5451 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5451/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5454 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5454/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5459 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5460 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5461 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5461/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5462 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5464 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5465 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5466 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5467 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5469 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5470 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5470/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5472 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7749 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7750 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7750/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7751 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7752 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7753 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7754 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7756 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7757 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7758 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7763 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7764 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7765 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7773 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7777 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7778 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7779 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7782 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7784 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7784/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7785 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7786 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7787 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7791 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7792 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7793 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7798 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7800 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7801 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7802 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7803 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7804 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7805 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7807 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7810 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7814 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7818 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7819 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7823 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7824 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7825 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7826 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7828 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7829 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7830 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7845 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7845/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7846 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7846/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7847 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7848 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12359 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12359/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12360 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12361 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12361/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12362 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12362/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12363 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12363/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12364 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12364/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12365 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12365/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12366 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12366/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12367 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12367/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12371 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12371/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12372 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12372/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12373 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12373/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12374 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12374/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12376 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12376/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12377 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12377/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12378 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12378/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12383 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12385 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12389 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12390 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12391 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12392 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12393 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12405 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17466 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18335 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18335/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18356 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18492 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18492/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18493 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18493/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18494 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18494/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18498 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18500 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18501 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18505 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18505/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18509 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18511 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5089 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5095 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5096 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5097 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5098 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5099 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5102 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5103 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5104 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5117 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5125 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5127 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5129 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5144 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5145 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5146 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5150 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5154 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5155 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5156 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5159 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5161 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5162 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5168 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5170 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5174 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5178 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5183 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5184 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5185 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5187 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5188 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11703 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11704 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11705 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11706 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11706/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11707 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11708 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11709 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11711 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11711/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11712 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11713 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11715 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11717 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11719 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11719/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11729 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11730 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11739 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11740 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11742 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11742/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11743 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11744 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11746 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11752 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11755 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11757 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11758 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11759 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11760 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11761 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11763 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11764 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13722 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15903 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17005 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17008 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17008/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17010 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17011 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17012 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17015 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17016 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17017 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17021 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17022 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17024 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17026 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20503 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5785 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9810 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9811 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9813 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12387 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12392 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12393 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12395 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12395/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12397 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12398 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12405 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12406 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12410 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12417 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12418 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12419 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12420 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12420/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12421 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12421/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15652 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15659 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15663 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15664 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15669 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15669/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15673 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15673/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15676 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15677 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15678 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15683 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15685 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15969 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15999 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16012 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16042 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16044 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26950 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26951 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26953 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26956 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26958 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26959 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26960 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26961 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26965 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26966 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26968 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26970 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26971 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26973 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26974 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26976 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26978 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35111 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35112 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35113 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6463 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6514 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6792 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6793 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6794 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6795 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6797 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6798 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6800 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6805 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6806 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6807 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6811 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6812 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6814 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6819 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6820 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6821 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6822 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6825 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6831 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23953 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23954 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23960 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23961 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23964 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23968 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23969 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23973 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23978 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23981 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23982 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23984 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23987 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23991 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23993 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23993/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23994 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23994/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23995 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23998 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23999 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-24002 page",
"url": "https://www.suse.com/security/cve/CVE-2021-24002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29945 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29946 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29948 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29956 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29957 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29964 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29967 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29969 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29970 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29976 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29980 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29984 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29985 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29986 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29988 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29989 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-29991 page",
"url": "https://www.suse.com/security/cve/CVE-2021-29991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30547 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38492 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38492/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-38495 page",
"url": "https://www.suse.com/security/cve/CVE-2021-38495/"
}
],
"title": "MozillaThunderbird-91.1.1-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10601-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-91.1.1-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-91.1.1-1.1.aarch64",
"product_id": "MozillaThunderbird-91.1.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"product_id": "MozillaThunderbird-translations-common-91.1.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"product_id": "MozillaThunderbird-translations-other-91.1.1-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-91.1.1-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-91.1.1-1.1.ppc64le",
"product_id": "MozillaThunderbird-91.1.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"product_id": "MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"product_id": "MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-91.1.1-1.1.s390x",
"product": {
"name": "MozillaThunderbird-91.1.1-1.1.s390x",
"product_id": "MozillaThunderbird-91.1.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"product_id": "MozillaThunderbird-translations-common-91.1.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"product_id": "MozillaThunderbird-translations-other-91.1.1-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-91.1.1-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-91.1.1-1.1.x86_64",
"product_id": "MozillaThunderbird-91.1.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"product_id": "MozillaThunderbird-translations-common-91.1.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.x86_64",
"product_id": "MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-91.1.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-91.1.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-91.1.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-91.1.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-91.1.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x"
},
"product_reference": "MozillaThunderbird-91.1.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-91.1.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-91.1.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-91.1.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-91.1.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-91.1.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-3089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3089"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the \"promiscuous IFRAME access bug,\" a related issue to CVE-2006-4568.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3089",
"url": "https://www.suse.com/security/cve/CVE-2007-3089"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3089",
"url": "https://bugzilla.suse.com/288115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2007-3089"
},
{
"cve": "CVE-2007-3285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3285"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Firefox to treat the requested file differently than Windows would.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3285",
"url": "https://www.suse.com/security/cve/CVE-2007-3285"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3285",
"url": "https://bugzilla.suse.com/288115"
},
{
"category": "external",
"summary": "SUSE Bug 455804 for CVE-2007-3285",
"url": "https://bugzilla.suse.com/455804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2007-3285"
},
{
"cve": "CVE-2007-3656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3656"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3656",
"url": "https://www.suse.com/security/cve/CVE-2007-3656"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3656",
"url": "https://bugzilla.suse.com/288115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-3656"
},
{
"cve": "CVE-2007-3670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3670"
}
],
"notes": [
{
"category": "general",
"text": "Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE\u0027s opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a \"defense in depth\" fix that will \"prevent IE from sending Firefox malicious data.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3670",
"url": "https://www.suse.com/security/cve/CVE-2007-3670"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3670",
"url": "https://bugzilla.suse.com/288115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-3670"
},
{
"cve": "CVE-2007-3734",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3734"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3734",
"url": "https://www.suse.com/security/cve/CVE-2007-3734"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3734",
"url": "https://bugzilla.suse.com/288115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-3734"
},
{
"cve": "CVE-2007-3735",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3735"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3735",
"url": "https://www.suse.com/security/cve/CVE-2007-3735"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3735",
"url": "https://bugzilla.suse.com/288115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-3735"
},
{
"cve": "CVE-2007-3736",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3736"
}
],
"notes": [
{
"category": "general",
"text": "Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script \"into another site\u0027s context\" via a \"timing issue\" involving the (1) addEventListener or (2) setTimeout function, probably by setting events that activate after the context has changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3736",
"url": "https://www.suse.com/security/cve/CVE-2007-3736"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3736",
"url": "https://bugzilla.suse.com/288115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-3736"
},
{
"cve": "CVE-2007-3737",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3737"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified \"element outside of a document.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3737",
"url": "https://www.suse.com/security/cve/CVE-2007-3737"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3737",
"url": "https://bugzilla.suse.com/288115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-3737"
},
{
"cve": "CVE-2007-3738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-3738"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-3738",
"url": "https://www.suse.com/security/cve/CVE-2007-3738"
},
{
"category": "external",
"summary": "SUSE Bug 288115 for CVE-2007-3738",
"url": "https://bugzilla.suse.com/288115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2007-3738"
},
{
"cve": "CVE-2008-0016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-0016"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-0016",
"url": "https://www.suse.com/security/cve/CVE-2008-0016"
},
{
"category": "external",
"summary": "SUSE Bug 429179 for CVE-2008-0016",
"url": "https://bugzilla.suse.com/429179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-0016"
},
{
"cve": "CVE-2008-1233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1233"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via \"XPCNativeWrapper pollution.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1233",
"url": "https://www.suse.com/security/cve/CVE-2008-1233"
},
{
"category": "external",
"summary": "SUSE Bug 370353 for CVE-2008-1233",
"url": "https://bugzilla.suse.com/370353"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-1233"
},
{
"cve": "CVE-2008-1236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1236"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1236",
"url": "https://www.suse.com/security/cve/CVE-2008-1236"
},
{
"category": "external",
"summary": "SUSE Bug 370353 for CVE-2008-1236",
"url": "https://bugzilla.suse.com/370353"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-1236"
},
{
"cve": "CVE-2008-3835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-3835"
}
],
"notes": [
{
"category": "general",
"text": "The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-3835",
"url": "https://www.suse.com/security/cve/CVE-2008-3835"
},
{
"category": "external",
"summary": "SUSE Bug 429179 for CVE-2008-3835",
"url": "https://bugzilla.suse.com/429179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-3835"
},
{
"cve": "CVE-2008-4058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4058"
}
],
"notes": [
{
"category": "general",
"text": "The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to \"pollute XPCNativeWrappers\" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4058",
"url": "https://www.suse.com/security/cve/CVE-2008-4058"
},
{
"category": "external",
"summary": "SUSE Bug 429179 for CVE-2008-4058",
"url": "https://bugzilla.suse.com/429179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-4058"
},
{
"cve": "CVE-2008-4061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4061"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via an mtd element with a large integer value in the rowspan attribute, related to the layout engine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4061",
"url": "https://www.suse.com/security/cve/CVE-2008-4061"
},
{
"category": "external",
"summary": "SUSE Bug 429179 for CVE-2008-4061",
"url": "https://bugzilla.suse.com/429179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-4061"
},
{
"cve": "CVE-2008-4064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4064"
}
],
"notes": [
{
"category": "general",
"text": "Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairo_surface_set_device_offset function, (2) integer overflows when handling animated PNG data in the info_callback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4064",
"url": "https://www.suse.com/security/cve/CVE-2008-4064"
},
{
"category": "external",
"summary": "SUSE Bug 429179 for CVE-2008-4064",
"url": "https://bugzilla.suse.com/429179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-4064"
},
{
"cve": "CVE-2008-4065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4065"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka \"Stripped BOM characters bug.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4065",
"url": "https://www.suse.com/security/cve/CVE-2008-4065"
},
{
"category": "external",
"summary": "SUSE Bug 429179 for CVE-2008-4065",
"url": "https://bugzilla.suse.com/429179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-4065"
},
{
"cve": "CVE-2008-4067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4067"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4067",
"url": "https://www.suse.com/security/cve/CVE-2008-4067"
},
{
"category": "external",
"summary": "SUSE Bug 429179 for CVE-2008-4067",
"url": "https://bugzilla.suse.com/429179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-4067"
},
{
"cve": "CVE-2008-4070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4070"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to \"canceling [a] newsgroup message\" and \"cancelled newsgroup messages.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4070",
"url": "https://www.suse.com/security/cve/CVE-2008-4070"
},
{
"category": "external",
"summary": "SUSE Bug 429179 for CVE-2008-4070",
"url": "https://bugzilla.suse.com/429179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-4070"
},
{
"cve": "CVE-2008-5012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5012"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5012",
"url": "https://www.suse.com/security/cve/CVE-2008-5012"
},
{
"category": "external",
"summary": "SUSE Bug 439841 for CVE-2008-5012",
"url": "https://bugzilla.suse.com/439841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-5012"
},
{
"cve": "CVE-2008-5014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5014"
}
],
"notes": [
{
"category": "general",
"text": "jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5014",
"url": "https://www.suse.com/security/cve/CVE-2008-5014"
},
{
"category": "external",
"summary": "SUSE Bug 439841 for CVE-2008-5014",
"url": "https://bugzilla.suse.com/439841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-5014"
},
{
"cve": "CVE-2008-5016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5016"
}
],
"notes": [
{
"category": "general",
"text": "The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5016",
"url": "https://www.suse.com/security/cve/CVE-2008-5016"
},
{
"category": "external",
"summary": "SUSE Bug 439841 for CVE-2008-5016",
"url": "https://bugzilla.suse.com/439841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-5016"
},
{
"cve": "CVE-2008-5021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5021"
}
],
"notes": [
{
"category": "general",
"text": "nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5021",
"url": "https://www.suse.com/security/cve/CVE-2008-5021"
},
{
"category": "external",
"summary": "SUSE Bug 439841 for CVE-2008-5021",
"url": "https://bugzilla.suse.com/439841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-5021"
},
{
"cve": "CVE-2008-5022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5022"
}
],
"notes": [
{
"category": "general",
"text": "The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5022",
"url": "https://www.suse.com/security/cve/CVE-2008-5022"
},
{
"category": "external",
"summary": "SUSE Bug 439841 for CVE-2008-5022",
"url": "https://bugzilla.suse.com/439841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5022"
},
{
"cve": "CVE-2008-5024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5024"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5024",
"url": "https://www.suse.com/security/cve/CVE-2008-5024"
},
{
"category": "external",
"summary": "SUSE Bug 439841 for CVE-2008-5024",
"url": "https://bugzilla.suse.com/439841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5024"
},
{
"cve": "CVE-2008-5500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5500"
}
],
"notes": [
{
"category": "general",
"text": "The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5500",
"url": "https://www.suse.com/security/cve/CVE-2008-5500"
},
{
"category": "external",
"summary": "SUSE Bug 455804 for CVE-2008-5500",
"url": "https://bugzilla.suse.com/455804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5500"
},
{
"cve": "CVE-2008-5503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5503"
}
],
"notes": [
{
"category": "general",
"text": "The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5503",
"url": "https://www.suse.com/security/cve/CVE-2008-5503"
},
{
"category": "external",
"summary": "SUSE Bug 455804 for CVE-2008-5503",
"url": "https://bugzilla.suse.com/455804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5503"
},
{
"cve": "CVE-2008-5506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5506"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka \"response disclosure.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5506",
"url": "https://www.suse.com/security/cve/CVE-2008-5506"
},
{
"category": "external",
"summary": "SUSE Bug 455804 for CVE-2008-5506",
"url": "https://bugzilla.suse.com/455804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5506"
},
{
"cve": "CVE-2008-5507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5507"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5507",
"url": "https://www.suse.com/security/cve/CVE-2008-5507"
},
{
"category": "external",
"summary": "SUSE Bug 455804 for CVE-2008-5507",
"url": "https://bugzilla.suse.com/455804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5507"
},
{
"cve": "CVE-2008-5508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5508"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5508",
"url": "https://www.suse.com/security/cve/CVE-2008-5508"
},
{
"category": "external",
"summary": "SUSE Bug 455804 for CVE-2008-5508",
"url": "https://bugzilla.suse.com/455804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5508"
},
{
"cve": "CVE-2008-5510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5510"
}
],
"notes": [
{
"category": "general",
"text": "The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the \u0027\\0\u0027 escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5510",
"url": "https://www.suse.com/security/cve/CVE-2008-5510"
},
{
"category": "external",
"summary": "SUSE Bug 455804 for CVE-2008-5510",
"url": "https://bugzilla.suse.com/455804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5510"
},
{
"cve": "CVE-2008-5511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-5511"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an \"unloaded document.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-5511",
"url": "https://www.suse.com/security/cve/CVE-2008-5511"
},
{
"category": "external",
"summary": "SUSE Bug 455804 for CVE-2008-5511",
"url": "https://bugzilla.suse.com/455804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-5511"
},
{
"cve": "CVE-2016-5824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5824"
}
],
"notes": [
{
"category": "general",
"text": "libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5824",
"url": "https://www.suse.com/security/cve/CVE-2016-5824"
},
{
"category": "external",
"summary": "SUSE Bug 1015964 for CVE-2016-5824",
"url": "https://bugzilla.suse.com/1015964"
},
{
"category": "external",
"summary": "SUSE Bug 1122983 for CVE-2016-5824",
"url": "https://bugzilla.suse.com/1122983"
},
{
"category": "external",
"summary": "SUSE Bug 986631 for CVE-2016-5824",
"url": "https://bugzilla.suse.com/986631"
},
{
"category": "external",
"summary": "SUSE Bug 986639 for CVE-2016-5824",
"url": "https://bugzilla.suse.com/986639"
},
{
"category": "external",
"summary": "SUSE Bug 986642 for CVE-2016-5824",
"url": "https://bugzilla.suse.com/986642"
},
{
"category": "external",
"summary": "SUSE Bug 986658 for CVE-2016-5824",
"url": "https://bugzilla.suse.com/986658"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5824"
},
{
"cve": "CVE-2016-9893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9893"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 50.1, Firefox ESR \u003c 45.6, and Thunderbird \u003c 45.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9893",
"url": "https://www.suse.com/security/cve/CVE-2016-9893"
},
{
"category": "external",
"summary": "SUSE Bug 1015422 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015422"
},
{
"category": "external",
"summary": "SUSE Bug 1015527 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015527"
},
{
"category": "external",
"summary": "SUSE Bug 1015528 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015528"
},
{
"category": "external",
"summary": "SUSE Bug 1015529 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015529"
},
{
"category": "external",
"summary": "SUSE Bug 1015530 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015530"
},
{
"category": "external",
"summary": "SUSE Bug 1015531 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015531"
},
{
"category": "external",
"summary": "SUSE Bug 1015533 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015533"
},
{
"category": "external",
"summary": "SUSE Bug 1015534 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015534"
},
{
"category": "external",
"summary": "SUSE Bug 1015535 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015535"
},
{
"category": "external",
"summary": "SUSE Bug 1015536 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015536"
},
{
"category": "external",
"summary": "SUSE Bug 1015537 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015537"
},
{
"category": "external",
"summary": "SUSE Bug 1015538 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015538"
},
{
"category": "external",
"summary": "SUSE Bug 1015540 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015540"
},
{
"category": "external",
"summary": "SUSE Bug 1015541 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015541"
},
{
"category": "external",
"summary": "SUSE Bug 1015542 for CVE-2016-9893",
"url": "https://bugzilla.suse.com/1015542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9893"
},
{
"cve": "CVE-2016-9895",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9895"
}
],
"notes": [
{
"category": "general",
"text": "Event handlers on \"marquee\" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects Firefox \u003c 50.1, Firefox ESR \u003c 45.6, and Thunderbird \u003c 45.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9895",
"url": "https://www.suse.com/security/cve/CVE-2016-9895"
},
{
"category": "external",
"summary": "SUSE Bug 1015422 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015422"
},
{
"category": "external",
"summary": "SUSE Bug 1015527 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015527"
},
{
"category": "external",
"summary": "SUSE Bug 1015528 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015528"
},
{
"category": "external",
"summary": "SUSE Bug 1015529 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015529"
},
{
"category": "external",
"summary": "SUSE Bug 1015530 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015530"
},
{
"category": "external",
"summary": "SUSE Bug 1015531 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015531"
},
{
"category": "external",
"summary": "SUSE Bug 1015533 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015533"
},
{
"category": "external",
"summary": "SUSE Bug 1015534 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015534"
},
{
"category": "external",
"summary": "SUSE Bug 1015535 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015535"
},
{
"category": "external",
"summary": "SUSE Bug 1015536 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015536"
},
{
"category": "external",
"summary": "SUSE Bug 1015537 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015537"
},
{
"category": "external",
"summary": "SUSE Bug 1015538 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015538"
},
{
"category": "external",
"summary": "SUSE Bug 1015540 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015540"
},
{
"category": "external",
"summary": "SUSE Bug 1015541 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015541"
},
{
"category": "external",
"summary": "SUSE Bug 1015542 for CVE-2016-9895",
"url": "https://bugzilla.suse.com/1015542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9895"
},
{
"cve": "CVE-2016-9897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9897"
}
],
"notes": [
{
"category": "general",
"text": "Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vulnerability affects Firefox \u003c 50.1, Firefox ESR \u003c 45.6, and Thunderbird \u003c 45.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9897",
"url": "https://www.suse.com/security/cve/CVE-2016-9897"
},
{
"category": "external",
"summary": "SUSE Bug 1015422 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015422"
},
{
"category": "external",
"summary": "SUSE Bug 1015527 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015527"
},
{
"category": "external",
"summary": "SUSE Bug 1015528 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015528"
},
{
"category": "external",
"summary": "SUSE Bug 1015529 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015529"
},
{
"category": "external",
"summary": "SUSE Bug 1015530 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015530"
},
{
"category": "external",
"summary": "SUSE Bug 1015531 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015531"
},
{
"category": "external",
"summary": "SUSE Bug 1015533 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015533"
},
{
"category": "external",
"summary": "SUSE Bug 1015534 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015534"
},
{
"category": "external",
"summary": "SUSE Bug 1015535 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015535"
},
{
"category": "external",
"summary": "SUSE Bug 1015536 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015536"
},
{
"category": "external",
"summary": "SUSE Bug 1015537 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015537"
},
{
"category": "external",
"summary": "SUSE Bug 1015538 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015538"
},
{
"category": "external",
"summary": "SUSE Bug 1015540 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015540"
},
{
"category": "external",
"summary": "SUSE Bug 1015541 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015541"
},
{
"category": "external",
"summary": "SUSE Bug 1015542 for CVE-2016-9897",
"url": "https://bugzilla.suse.com/1015542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9897"
},
{
"cve": "CVE-2016-9898",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9898"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox \u003c 50.1, Firefox ESR \u003c 45.6, and Thunderbird \u003c 45.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9898",
"url": "https://www.suse.com/security/cve/CVE-2016-9898"
},
{
"category": "external",
"summary": "SUSE Bug 1015422 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015422"
},
{
"category": "external",
"summary": "SUSE Bug 1015527 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015527"
},
{
"category": "external",
"summary": "SUSE Bug 1015528 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015528"
},
{
"category": "external",
"summary": "SUSE Bug 1015529 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015529"
},
{
"category": "external",
"summary": "SUSE Bug 1015530 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015530"
},
{
"category": "external",
"summary": "SUSE Bug 1015531 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015531"
},
{
"category": "external",
"summary": "SUSE Bug 1015533 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015533"
},
{
"category": "external",
"summary": "SUSE Bug 1015534 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015534"
},
{
"category": "external",
"summary": "SUSE Bug 1015535 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015535"
},
{
"category": "external",
"summary": "SUSE Bug 1015536 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015536"
},
{
"category": "external",
"summary": "SUSE Bug 1015537 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015537"
},
{
"category": "external",
"summary": "SUSE Bug 1015538 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015538"
},
{
"category": "external",
"summary": "SUSE Bug 1015540 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015540"
},
{
"category": "external",
"summary": "SUSE Bug 1015541 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015541"
},
{
"category": "external",
"summary": "SUSE Bug 1015542 for CVE-2016-9898",
"url": "https://bugzilla.suse.com/1015542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9898"
},
{
"cve": "CVE-2016-9899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9899"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox \u003c 50.1, Firefox ESR \u003c 45.6, and Thunderbird \u003c 45.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9899",
"url": "https://www.suse.com/security/cve/CVE-2016-9899"
},
{
"category": "external",
"summary": "SUSE Bug 1015422 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015422"
},
{
"category": "external",
"summary": "SUSE Bug 1015527 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015527"
},
{
"category": "external",
"summary": "SUSE Bug 1015528 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015528"
},
{
"category": "external",
"summary": "SUSE Bug 1015529 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015529"
},
{
"category": "external",
"summary": "SUSE Bug 1015530 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015530"
},
{
"category": "external",
"summary": "SUSE Bug 1015531 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015531"
},
{
"category": "external",
"summary": "SUSE Bug 1015533 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015533"
},
{
"category": "external",
"summary": "SUSE Bug 1015534 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015534"
},
{
"category": "external",
"summary": "SUSE Bug 1015535 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015535"
},
{
"category": "external",
"summary": "SUSE Bug 1015536 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015536"
},
{
"category": "external",
"summary": "SUSE Bug 1015537 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015537"
},
{
"category": "external",
"summary": "SUSE Bug 1015538 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015538"
},
{
"category": "external",
"summary": "SUSE Bug 1015540 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015540"
},
{
"category": "external",
"summary": "SUSE Bug 1015541 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015541"
},
{
"category": "external",
"summary": "SUSE Bug 1015542 for CVE-2016-9899",
"url": "https://bugzilla.suse.com/1015542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9899"
},
{
"cve": "CVE-2016-9900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9900"
}
],
"notes": [
{
"category": "general",
"text": "External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of \"data:\" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox \u003c 50.1, Firefox ESR \u003c 45.6, and Thunderbird \u003c 45.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9900",
"url": "https://www.suse.com/security/cve/CVE-2016-9900"
},
{
"category": "external",
"summary": "SUSE Bug 1015422 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015422"
},
{
"category": "external",
"summary": "SUSE Bug 1015527 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015527"
},
{
"category": "external",
"summary": "SUSE Bug 1015528 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015528"
},
{
"category": "external",
"summary": "SUSE Bug 1015529 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015529"
},
{
"category": "external",
"summary": "SUSE Bug 1015530 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015530"
},
{
"category": "external",
"summary": "SUSE Bug 1015531 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015531"
},
{
"category": "external",
"summary": "SUSE Bug 1015533 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015533"
},
{
"category": "external",
"summary": "SUSE Bug 1015534 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015534"
},
{
"category": "external",
"summary": "SUSE Bug 1015535 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015535"
},
{
"category": "external",
"summary": "SUSE Bug 1015536 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015536"
},
{
"category": "external",
"summary": "SUSE Bug 1015537 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015537"
},
{
"category": "external",
"summary": "SUSE Bug 1015538 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015538"
},
{
"category": "external",
"summary": "SUSE Bug 1015540 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015540"
},
{
"category": "external",
"summary": "SUSE Bug 1015541 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015541"
},
{
"category": "external",
"summary": "SUSE Bug 1015542 for CVE-2016-9900",
"url": "https://bugzilla.suse.com/1015542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9900"
},
{
"cve": "CVE-2016-9904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9904"
}
],
"notes": [
{
"category": "general",
"text": "An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be used to leak information, such as usernames embedded in JavaScript code, across websites. This vulnerability affects Firefox \u003c 50.1, Firefox ESR \u003c 45.6, and Thunderbird \u003c 45.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9904",
"url": "https://www.suse.com/security/cve/CVE-2016-9904"
},
{
"category": "external",
"summary": "SUSE Bug 1015422 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015422"
},
{
"category": "external",
"summary": "SUSE Bug 1015527 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015527"
},
{
"category": "external",
"summary": "SUSE Bug 1015528 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015528"
},
{
"category": "external",
"summary": "SUSE Bug 1015529 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015529"
},
{
"category": "external",
"summary": "SUSE Bug 1015530 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015530"
},
{
"category": "external",
"summary": "SUSE Bug 1015531 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015531"
},
{
"category": "external",
"summary": "SUSE Bug 1015533 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015533"
},
{
"category": "external",
"summary": "SUSE Bug 1015534 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015534"
},
{
"category": "external",
"summary": "SUSE Bug 1015535 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015535"
},
{
"category": "external",
"summary": "SUSE Bug 1015536 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015536"
},
{
"category": "external",
"summary": "SUSE Bug 1015537 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015537"
},
{
"category": "external",
"summary": "SUSE Bug 1015538 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015538"
},
{
"category": "external",
"summary": "SUSE Bug 1015540 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015540"
},
{
"category": "external",
"summary": "SUSE Bug 1015541 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015541"
},
{
"category": "external",
"summary": "SUSE Bug 1015542 for CVE-2016-9904",
"url": "https://bugzilla.suse.com/1015542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9904"
},
{
"cve": "CVE-2016-9905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9905"
}
],
"notes": [
{
"category": "general",
"text": "A potentially exploitable crash in \"EnumerateSubDocuments\" while adding or removing sub-documents. This vulnerability affects Firefox ESR \u003c 45.6 and Thunderbird \u003c 45.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9905",
"url": "https://www.suse.com/security/cve/CVE-2016-9905"
},
{
"category": "external",
"summary": "SUSE Bug 1015422 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015422"
},
{
"category": "external",
"summary": "SUSE Bug 1015527 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015527"
},
{
"category": "external",
"summary": "SUSE Bug 1015528 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015528"
},
{
"category": "external",
"summary": "SUSE Bug 1015529 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015529"
},
{
"category": "external",
"summary": "SUSE Bug 1015530 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015530"
},
{
"category": "external",
"summary": "SUSE Bug 1015531 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015531"
},
{
"category": "external",
"summary": "SUSE Bug 1015533 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015533"
},
{
"category": "external",
"summary": "SUSE Bug 1015534 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015534"
},
{
"category": "external",
"summary": "SUSE Bug 1015535 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015535"
},
{
"category": "external",
"summary": "SUSE Bug 1015536 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015536"
},
{
"category": "external",
"summary": "SUSE Bug 1015537 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015537"
},
{
"category": "external",
"summary": "SUSE Bug 1015538 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015538"
},
{
"category": "external",
"summary": "SUSE Bug 1015540 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015540"
},
{
"category": "external",
"summary": "SUSE Bug 1015541 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015541"
},
{
"category": "external",
"summary": "SUSE Bug 1015542 for CVE-2016-9905",
"url": "https://bugzilla.suse.com/1015542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9905"
},
{
"cve": "CVE-2017-16541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-16541"
}
],
"notes": [
{
"category": "general",
"text": "Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-16541",
"url": "https://www.suse.com/security/cve/CVE-2017-16541"
},
{
"category": "external",
"summary": "SUSE Bug 1066489 for CVE-2017-16541",
"url": "https://bugzilla.suse.com/1066489"
},
{
"category": "external",
"summary": "SUSE Bug 1107343 for CVE-2017-16541",
"url": "https://bugzilla.suse.com/1107343"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-16541"
},
{
"cve": "CVE-2017-5373",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5373"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 45.7, Firefox ESR \u003c 45.7, and Firefox \u003c 51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5373",
"url": "https://www.suse.com/security/cve/CVE-2017-5373"
},
{
"category": "external",
"summary": "SUSE Bug 1021824 for CVE-2017-5373",
"url": "https://bugzilla.suse.com/1021824"
},
{
"category": "external",
"summary": "SUSE Bug 1021991 for CVE-2017-5373",
"url": "https://bugzilla.suse.com/1021991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5373"
},
{
"cve": "CVE-2017-5375",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5375"
}
],
"notes": [
{
"category": "general",
"text": "JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird \u003c 45.7, Firefox ESR \u003c 45.7, and Firefox \u003c 51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5375",
"url": "https://www.suse.com/security/cve/CVE-2017-5375"
},
{
"category": "external",
"summary": "SUSE Bug 1021814 for CVE-2017-5375",
"url": "https://bugzilla.suse.com/1021814"
},
{
"category": "external",
"summary": "SUSE Bug 1021991 for CVE-2017-5375",
"url": "https://bugzilla.suse.com/1021991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5375"
},
{
"cve": "CVE-2017-5376",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5376"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird \u003c 45.7, Firefox ESR \u003c 45.7, and Firefox \u003c 51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5376",
"url": "https://www.suse.com/security/cve/CVE-2017-5376"
},
{
"category": "external",
"summary": "SUSE Bug 1021817 for CVE-2017-5376",
"url": "https://bugzilla.suse.com/1021817"
},
{
"category": "external",
"summary": "SUSE Bug 1021991 for CVE-2017-5376",
"url": "https://bugzilla.suse.com/1021991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5376"
},
{
"cve": "CVE-2017-5378",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5378"
}
],
"notes": [
{
"category": "general",
"text": "Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object\u0027s address can be discovered through hash codes, and also allows for data leakage of an object\u0027s content using these hash codes. This vulnerability affects Thunderbird \u003c 45.7, Firefox ESR \u003c 45.7, and Firefox \u003c 51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5378",
"url": "https://www.suse.com/security/cve/CVE-2017-5378"
},
{
"category": "external",
"summary": "SUSE Bug 1021818 for CVE-2017-5378",
"url": "https://bugzilla.suse.com/1021818"
},
{
"category": "external",
"summary": "SUSE Bug 1021991 for CVE-2017-5378",
"url": "https://bugzilla.suse.com/1021991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5378"
},
{
"cve": "CVE-2017-5380",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5380"
}
],
"notes": [
{
"category": "general",
"text": "A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird \u003c 45.7, Firefox ESR \u003c 45.7, and Firefox \u003c 51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5380",
"url": "https://www.suse.com/security/cve/CVE-2017-5380"
},
{
"category": "external",
"summary": "SUSE Bug 1021819 for CVE-2017-5380",
"url": "https://bugzilla.suse.com/1021819"
},
{
"category": "external",
"summary": "SUSE Bug 1021991 for CVE-2017-5380",
"url": "https://bugzilla.suse.com/1021991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5380"
},
{
"cve": "CVE-2017-5383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5383"
}
],
"notes": [
{
"category": "general",
"text": "URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird \u003c 45.7, Firefox ESR \u003c 45.7, and Firefox \u003c 51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5383",
"url": "https://www.suse.com/security/cve/CVE-2017-5383"
},
{
"category": "external",
"summary": "SUSE Bug 1021822 for CVE-2017-5383",
"url": "https://bugzilla.suse.com/1021822"
},
{
"category": "external",
"summary": "SUSE Bug 1021991 for CVE-2017-5383",
"url": "https://bugzilla.suse.com/1021991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5383"
},
{
"cve": "CVE-2017-5390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5390"
}
],
"notes": [
{
"category": "general",
"text": "The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for potential privilege escalation. This vulnerability affects Thunderbird \u003c 45.7, Firefox ESR \u003c 45.7, and Firefox \u003c 51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5390",
"url": "https://www.suse.com/security/cve/CVE-2017-5390"
},
{
"category": "external",
"summary": "SUSE Bug 1021820 for CVE-2017-5390",
"url": "https://bugzilla.suse.com/1021820"
},
{
"category": "external",
"summary": "SUSE Bug 1021991 for CVE-2017-5390",
"url": "https://bugzilla.suse.com/1021991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5390"
},
{
"cve": "CVE-2017-5396",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5396"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. This vulnerability affects Thunderbird \u003c 45.7, Firefox ESR \u003c 45.7, and Firefox \u003c 51.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5396",
"url": "https://www.suse.com/security/cve/CVE-2017-5396"
},
{
"category": "external",
"summary": "SUSE Bug 1021821 for CVE-2017-5396",
"url": "https://bugzilla.suse.com/1021821"
},
{
"category": "external",
"summary": "SUSE Bug 1021991 for CVE-2017-5396",
"url": "https://bugzilla.suse.com/1021991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5396"
},
{
"cve": "CVE-2017-5398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5398"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5398",
"url": "https://www.suse.com/security/cve/CVE-2017-5398"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5398",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5398",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5398"
},
{
"cve": "CVE-2017-5399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5399"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5399",
"url": "https://www.suse.com/security/cve/CVE-2017-5399"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5399",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5399",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5399"
},
{
"cve": "CVE-2017-5400",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5400"
}
],
"notes": [
{
"category": "general",
"text": "JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5400",
"url": "https://www.suse.com/security/cve/CVE-2017-5400"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5400",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5400",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5400"
},
{
"cve": "CVE-2017-5401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5401"
}
],
"notes": [
{
"category": "general",
"text": "A crash triggerable by web content in which an \"ErrorResult\" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5401",
"url": "https://www.suse.com/security/cve/CVE-2017-5401"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5401",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5401",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5401"
},
{
"cve": "CVE-2017-5402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5402"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free can occur when events are fired for a \"FontFace\" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5402",
"url": "https://www.suse.com/security/cve/CVE-2017-5402"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5402",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5402",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5402"
},
{
"cve": "CVE-2017-5403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5403"
}
],
"notes": [
{
"category": "general",
"text": "When adding a range to an object in the DOM, it is possible to use \"addRange\" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5403",
"url": "https://www.suse.com/security/cve/CVE-2017-5403"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5403",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5403",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5403"
},
{
"cve": "CVE-2017-5404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5404"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5404",
"url": "https://www.suse.com/security/cve/CVE-2017-5404"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5404",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5404",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5404"
},
{
"cve": "CVE-2017-5405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5405"
}
],
"notes": [
{
"category": "general",
"text": "Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5405",
"url": "https://www.suse.com/security/cve/CVE-2017-5405"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5405",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5405",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5405"
},
{
"cve": "CVE-2017-5406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5406"
}
],
"notes": [
{
"category": "general",
"text": "A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5406",
"url": "https://www.suse.com/security/cve/CVE-2017-5406"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5406",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5406",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5406"
},
{
"cve": "CVE-2017-5407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5407"
}
],
"notes": [
{
"category": "general",
"text": "Using SVG filters that don\u0027t use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5407",
"url": "https://www.suse.com/security/cve/CVE-2017-5407"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5407",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5407",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5407"
},
{
"cve": "CVE-2017-5408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5408"
}
],
"notes": [
{
"category": "general",
"text": "Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5408",
"url": "https://www.suse.com/security/cve/CVE-2017-5408"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5408",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5408",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5408"
},
{
"cve": "CVE-2017-5410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5410"
}
],
"notes": [
{
"category": "general",
"text": "Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5410",
"url": "https://www.suse.com/security/cve/CVE-2017-5410"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5410",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5410",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5410"
},
{
"cve": "CVE-2017-5412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5412"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5412",
"url": "https://www.suse.com/security/cve/CVE-2017-5412"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5412",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5412",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5412"
},
{
"cve": "CVE-2017-5413",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5413"
}
],
"notes": [
{
"category": "general",
"text": "A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5413",
"url": "https://www.suse.com/security/cve/CVE-2017-5413"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5413",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5413",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5413"
},
{
"cve": "CVE-2017-5414",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5414"
}
],
"notes": [
{
"category": "general",
"text": "The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5414",
"url": "https://www.suse.com/security/cve/CVE-2017-5414"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5414",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5414",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5414"
},
{
"cve": "CVE-2017-5416",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5416"
}
],
"notes": [
{
"category": "general",
"text": "In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dereference in practice. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5416",
"url": "https://www.suse.com/security/cve/CVE-2017-5416"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5416",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5416",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5416"
},
{
"cve": "CVE-2017-5418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5418"
}
],
"notes": [
{
"category": "general",
"text": "An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of random memory containing matches to specifically set patterns. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5418",
"url": "https://www.suse.com/security/cve/CVE-2017-5418"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5418",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5418",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5418"
},
{
"cve": "CVE-2017-5419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5419"
}
],
"notes": [
{
"category": "general",
"text": "If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service (DOS) attack. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5419",
"url": "https://www.suse.com/security/cve/CVE-2017-5419"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5419",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5419",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5419"
},
{
"cve": "CVE-2017-5421",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5421"
}
],
"notes": [
{
"category": "general",
"text": "A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5421",
"url": "https://www.suse.com/security/cve/CVE-2017-5421"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5421",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5421",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5421"
},
{
"cve": "CVE-2017-5422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5422"
}
],
"notes": [
{
"category": "general",
"text": "If a malicious site uses the \"view-source:\" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink is selected. This was fixed by no longer making \"view-source:\" linkable. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5422",
"url": "https://www.suse.com/security/cve/CVE-2017-5422"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5422",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5422",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5422"
},
{
"cve": "CVE-2017-5426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5426"
}
],
"notes": [
{
"category": "general",
"text": "On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails to be applied and items that would run within the sandbox are run protected only by the running filter which is typically weak compared to the sandbox. Note: this issue only affects Linux. Other operating systems are not affected. This vulnerability affects Firefox \u003c 52 and Thunderbird \u003c 52.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5426",
"url": "https://www.suse.com/security/cve/CVE-2017-5426"
},
{
"category": "external",
"summary": "SUSE Bug 1028391 for CVE-2017-5426",
"url": "https://bugzilla.suse.com/1028391"
},
{
"category": "external",
"summary": "SUSE Bug 1028393 for CVE-2017-5426",
"url": "https://bugzilla.suse.com/1028393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5426"
},
{
"cve": "CVE-2017-5429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5429"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5429",
"url": "https://www.suse.com/security/cve/CVE-2017-5429"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5429",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5429",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5429"
},
{
"cve": "CVE-2017-5430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5430"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5430",
"url": "https://www.suse.com/security/cve/CVE-2017-5430"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5430",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5430",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5430"
},
{
"cve": "CVE-2017-5432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5432"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5432",
"url": "https://www.suse.com/security/cve/CVE-2017-5432"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5432",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5432",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5432"
},
{
"cve": "CVE-2017-5433",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5433"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5433",
"url": "https://www.suse.com/security/cve/CVE-2017-5433"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5433",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5433",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5433"
},
{
"cve": "CVE-2017-5434",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5434"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5434",
"url": "https://www.suse.com/security/cve/CVE-2017-5434"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5434",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5434",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5434"
},
{
"cve": "CVE-2017-5435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5435"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5435",
"url": "https://www.suse.com/security/cve/CVE-2017-5435"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5435",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5435",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5435"
},
{
"cve": "CVE-2017-5436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5436"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5436",
"url": "https://www.suse.com/security/cve/CVE-2017-5436"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5436",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035204 for CVE-2017-5436",
"url": "https://bugzilla.suse.com/1035204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5436"
},
{
"cve": "CVE-2017-5437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5437"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5437",
"url": "https://www.suse.com/security/cve/CVE-2017-5437"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5437",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5437",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5437"
},
{
"cve": "CVE-2017-5438",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5438"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5438",
"url": "https://www.suse.com/security/cve/CVE-2017-5438"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5438",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5438",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5438"
},
{
"cve": "CVE-2017-5439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5439"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5439",
"url": "https://www.suse.com/security/cve/CVE-2017-5439"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5439",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5439",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5439"
},
{
"cve": "CVE-2017-5440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5440"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5440",
"url": "https://www.suse.com/security/cve/CVE-2017-5440"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5440",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5440",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5440"
},
{
"cve": "CVE-2017-5441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5441"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5441",
"url": "https://www.suse.com/security/cve/CVE-2017-5441"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5441",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5441",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5441"
},
{
"cve": "CVE-2017-5442",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5442"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5442",
"url": "https://www.suse.com/security/cve/CVE-2017-5442"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5442",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5442",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5442"
},
{
"cve": "CVE-2017-5443",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5443"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5443",
"url": "https://www.suse.com/security/cve/CVE-2017-5443"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5443",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5443",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5443"
},
{
"cve": "CVE-2017-5444",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5444"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow vulnerability while parsing \"application/http-index-format\" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5444",
"url": "https://www.suse.com/security/cve/CVE-2017-5444"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5444",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5444",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5444"
},
{
"cve": "CVE-2017-5445",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5445"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability while parsing \"application/http-index-format\" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5445",
"url": "https://www.suse.com/security/cve/CVE-2017-5445"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5445",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5445",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5445"
},
{
"cve": "CVE-2017-5446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5446"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read when an HTTP/2 connection to a servers sends \"DATA\" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5446",
"url": "https://www.suse.com/security/cve/CVE-2017-5446"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5446",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5446",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5446"
},
{
"cve": "CVE-2017-5447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5447"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5447",
"url": "https://www.suse.com/security/cve/CVE-2017-5447"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5447",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5447",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5447"
},
{
"cve": "CVE-2017-5449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5449"
}
],
"notes": [
{
"category": "general",
"text": "A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5449",
"url": "https://www.suse.com/security/cve/CVE-2017-5449"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5449",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5449",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5449"
},
{
"cve": "CVE-2017-5451",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5451"
}
],
"notes": [
{
"category": "general",
"text": "A mechanism to spoof the addressbar through the user interaction on the addressbar and the \"onblur\" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5451",
"url": "https://www.suse.com/security/cve/CVE-2017-5451"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5451",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5451",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5451"
},
{
"cve": "CVE-2017-5454",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5454"
}
],
"notes": [
{
"category": "general",
"text": "A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5454",
"url": "https://www.suse.com/security/cve/CVE-2017-5454"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5454",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5454",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-5454"
},
{
"cve": "CVE-2017-5459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5459"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5459",
"url": "https://www.suse.com/security/cve/CVE-2017-5459"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5459",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5459",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5459"
},
{
"cve": "CVE-2017-5460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5460"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5460",
"url": "https://www.suse.com/security/cve/CVE-2017-5460"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5460",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5460",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5460"
},
{
"cve": "CVE-2017-5461",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5461"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5461",
"url": "https://www.suse.com/security/cve/CVE-2017-5461"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5461",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5461",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5461"
},
{
"cve": "CVE-2017-5462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5462"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5462",
"url": "https://www.suse.com/security/cve/CVE-2017-5462"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5462",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5462",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5462"
},
{
"cve": "CVE-2017-5464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5464"
}
],
"notes": [
{
"category": "general",
"text": "During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5464",
"url": "https://www.suse.com/security/cve/CVE-2017-5464"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5464",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5464",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5464"
},
{
"cve": "CVE-2017-5465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5465"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read while processing SVG content in \"ConvolvePixel\". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5465",
"url": "https://www.suse.com/security/cve/CVE-2017-5465"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5465",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5465",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5465"
},
{
"cve": "CVE-2017-5466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5466"
}
],
"notes": [
{
"category": "general",
"text": "If a page is loaded from an original site through a hyperlink and contains a redirect to a \"data:text/html\" URL, triggering a reload will run the reloaded \"data:text/html\" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5466",
"url": "https://www.suse.com/security/cve/CVE-2017-5466"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5466",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5466",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5466"
},
{
"cve": "CVE-2017-5467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5467"
}
],
"notes": [
{
"category": "general",
"text": "A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5467",
"url": "https://www.suse.com/security/cve/CVE-2017-5467"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5467",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5467",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5467"
},
{
"cve": "CVE-2017-5469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5469"
}
],
"notes": [
{
"category": "general",
"text": "Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5469",
"url": "https://www.suse.com/security/cve/CVE-2017-5469"
},
{
"category": "external",
"summary": "SUSE Bug 1035082 for CVE-2017-5469",
"url": "https://bugzilla.suse.com/1035082"
},
{
"category": "external",
"summary": "SUSE Bug 1035209 for CVE-2017-5469",
"url": "https://bugzilla.suse.com/1035209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5469"
},
{
"cve": "CVE-2017-5470",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5470"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5470",
"url": "https://www.suse.com/security/cve/CVE-2017-5470"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-5470",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-5470",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-5470",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-5470",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-5470",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5470"
},
{
"cve": "CVE-2017-5472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5472"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5472",
"url": "https://www.suse.com/security/cve/CVE-2017-5472"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-5472",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-5472",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-5472",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-5472",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-5472",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5472"
},
{
"cve": "CVE-2017-7749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7749"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7749",
"url": "https://www.suse.com/security/cve/CVE-2017-7749"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7749",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7749",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7749",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7749",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7749",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7749"
},
{
"cve": "CVE-2017-7750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7750"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability during video control operations when a \"\u003ctrack\u003e\" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7750",
"url": "https://www.suse.com/security/cve/CVE-2017-7750"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7750",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7750",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7750",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7750",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7750",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7750"
},
{
"cve": "CVE-2017-7751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7751"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7751",
"url": "https://www.suse.com/security/cve/CVE-2017-7751"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7751",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7751",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7751",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7751",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7751",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7751"
},
{
"cve": "CVE-2017-7752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7752"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7752",
"url": "https://www.suse.com/security/cve/CVE-2017-7752"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7752",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7752",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7752",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7752",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7752",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7752"
},
{
"cve": "CVE-2017-7753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7753"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7753",
"url": "https://www.suse.com/security/cve/CVE-2017-7753"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7753",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7753"
},
{
"cve": "CVE-2017-7754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7754"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read in WebGL with a maliciously crafted \"ImageInfo\" object during WebGL operations. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7754",
"url": "https://www.suse.com/security/cve/CVE-2017-7754"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7754",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7754",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7754",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7754",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7754",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7754"
},
{
"cve": "CVE-2017-7756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7756"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7756",
"url": "https://www.suse.com/security/cve/CVE-2017-7756"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7756",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7756",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7756",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7756",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7756",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7756"
},
{
"cve": "CVE-2017-7757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7757"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7757",
"url": "https://www.suse.com/security/cve/CVE-2017-7757"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7757",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7757",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7757",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7757",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7757",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7757"
},
{
"cve": "CVE-2017-7758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7758"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7758",
"url": "https://www.suse.com/security/cve/CVE-2017-7758"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7758",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7758",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7758",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7758",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7758",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7758"
},
{
"cve": "CVE-2017-7763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7763"
}
],
"notes": [
{
"category": "general",
"text": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7763",
"url": "https://www.suse.com/security/cve/CVE-2017-7763"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7763",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7763",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7763",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7763",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7763",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7763"
},
{
"cve": "CVE-2017-7764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7764"
}
],
"notes": [
{
"category": "general",
"text": "Characters from the \"Canadian Syllabics\" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw \"punycode\" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from \"Aspirational Use Scripts\" such as Canadian Syllabics to be mixed with Latin characters in the \"moderately restrictive\" IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as \"Limited Use Scripts.\". This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7764",
"url": "https://www.suse.com/security/cve/CVE-2017-7764"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7764",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7764",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7764",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7764",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7764",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7764"
},
{
"cve": "CVE-2017-7765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7765"
}
],
"notes": [
{
"category": "general",
"text": "The \"Mark of the Web\" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7765",
"url": "https://www.suse.com/security/cve/CVE-2017-7765"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7765",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7765",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7765",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7765",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7765",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7765"
},
{
"cve": "CVE-2017-7773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7773"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7773",
"url": "https://www.suse.com/security/cve/CVE-2017-7773"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7773",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7773",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7773",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7773",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7773",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7773"
},
{
"cve": "CVE-2017-7777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7777"
}
],
"notes": [
{
"category": "general",
"text": "Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7777",
"url": "https://www.suse.com/security/cve/CVE-2017-7777"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7777",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7777",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7777",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7777",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7777",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7777"
},
{
"cve": "CVE-2017-7778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7778"
}
],
"notes": [
{
"category": "general",
"text": "A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7778",
"url": "https://www.suse.com/security/cve/CVE-2017-7778"
},
{
"category": "external",
"summary": "SUSE Bug 1043960 for CVE-2017-7778",
"url": "https://bugzilla.suse.com/1043960"
},
{
"category": "external",
"summary": "SUSE Bug 1044239 for CVE-2017-7778",
"url": "https://bugzilla.suse.com/1044239"
},
{
"category": "external",
"summary": "SUSE Bug 1044240 for CVE-2017-7778",
"url": "https://bugzilla.suse.com/1044240"
},
{
"category": "external",
"summary": "SUSE Bug 1044241 for CVE-2017-7778",
"url": "https://bugzilla.suse.com/1044241"
},
{
"category": "external",
"summary": "SUSE Bug 1044242 for CVE-2017-7778",
"url": "https://bugzilla.suse.com/1044242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7778"
},
{
"cve": "CVE-2017-7779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7779"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7779",
"url": "https://www.suse.com/security/cve/CVE-2017-7779"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7779",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7779"
},
{
"cve": "CVE-2017-7782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7782"
}
],
"notes": [
{
"category": "general",
"text": "An error in the \"WindowsDllDetourPatcher\" where a RWX (\"Read/Write/Execute\") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7782",
"url": "https://www.suse.com/security/cve/CVE-2017-7782"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7782",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-7782"
},
{
"cve": "CVE-2017-7784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7784"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7784",
"url": "https://www.suse.com/security/cve/CVE-2017-7784"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7784",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7784"
},
{
"cve": "CVE-2017-7785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7785"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7785",
"url": "https://www.suse.com/security/cve/CVE-2017-7785"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7785",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7785"
},
{
"cve": "CVE-2017-7786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7786"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7786",
"url": "https://www.suse.com/security/cve/CVE-2017-7786"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7786",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7786"
},
{
"cve": "CVE-2017-7787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7787"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7787",
"url": "https://www.suse.com/security/cve/CVE-2017-7787"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7787",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7787"
},
{
"cve": "CVE-2017-7791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7791"
}
],
"notes": [
{
"category": "general",
"text": "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7791",
"url": "https://www.suse.com/security/cve/CVE-2017-7791"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7791",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7791"
},
{
"cve": "CVE-2017-7792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7792"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7792",
"url": "https://www.suse.com/security/cve/CVE-2017-7792"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7792",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7792"
},
{
"cve": "CVE-2017-7793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7793"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7793",
"url": "https://www.suse.com/security/cve/CVE-2017-7793"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7793",
"url": "https://bugzilla.suse.com/1060445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7793"
},
{
"cve": "CVE-2017-7798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7798"
}
],
"notes": [
{
"category": "general",
"text": "The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR \u003c 52.3 and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7798",
"url": "https://www.suse.com/security/cve/CVE-2017-7798"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7798",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7798"
},
{
"cve": "CVE-2017-7800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7800"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7800",
"url": "https://www.suse.com/security/cve/CVE-2017-7800"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7800",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7800"
},
{
"cve": "CVE-2017-7801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7801"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7801",
"url": "https://www.suse.com/security/cve/CVE-2017-7801"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7801",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7801"
},
{
"cve": "CVE-2017-7802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7802"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7802",
"url": "https://www.suse.com/security/cve/CVE-2017-7802"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7802",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7802"
},
{
"cve": "CVE-2017-7803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7803"
}
],
"notes": [
{
"category": "general",
"text": "When a page\u0027s content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7803",
"url": "https://www.suse.com/security/cve/CVE-2017-7803"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7803",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7803"
},
{
"cve": "CVE-2017-7804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7804"
}
],
"notes": [
{
"category": "general",
"text": "The destructor function for the \"WindowsDllDetourPatcher\" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7804",
"url": "https://www.suse.com/security/cve/CVE-2017-7804"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7804",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7804"
},
{
"cve": "CVE-2017-7805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7805"
}
],
"notes": [
{
"category": "general",
"text": "During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer pointing to the old, freed buffer, resulting in a use-after-free when handshake hashes are then calculated afterwards. This can result in a potentially exploitable crash. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7805",
"url": "https://www.suse.com/security/cve/CVE-2017-7805"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7805",
"url": "https://bugzilla.suse.com/1060445"
},
{
"category": "external",
"summary": "SUSE Bug 1061005 for CVE-2017-7805",
"url": "https://bugzilla.suse.com/1061005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7805"
},
{
"cve": "CVE-2017-7807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7807"
}
],
"notes": [
{
"category": "general",
"text": "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7807",
"url": "https://www.suse.com/security/cve/CVE-2017-7807"
},
{
"category": "external",
"summary": "SUSE Bug 1052829 for CVE-2017-7807",
"url": "https://bugzilla.suse.com/1052829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7807"
},
{
"cve": "CVE-2017-7810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7810"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7810",
"url": "https://www.suse.com/security/cve/CVE-2017-7810"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7810",
"url": "https://bugzilla.suse.com/1060445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7810"
},
{
"cve": "CVE-2017-7814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7814"
}
],
"notes": [
{
"category": "general",
"text": "File downloads encoded with \"blob:\" and \"data:\" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files. This would allow malicious sites to lure users into downloading executables that would otherwise be detected as suspicious. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7814",
"url": "https://www.suse.com/security/cve/CVE-2017-7814"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7814",
"url": "https://bugzilla.suse.com/1060445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7814"
},
{
"cve": "CVE-2017-7818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7818"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7818",
"url": "https://www.suse.com/security/cve/CVE-2017-7818"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7818",
"url": "https://bugzilla.suse.com/1060445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7818"
},
{
"cve": "CVE-2017-7819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7819"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from memory. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7819",
"url": "https://www.suse.com/security/cve/CVE-2017-7819"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7819",
"url": "https://bugzilla.suse.com/1060445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7819"
},
{
"cve": "CVE-2017-7823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7823"
}
],
"notes": [
{
"category": "general",
"text": "The content security policy (CSP) \"sandbox\" directive did not create a unique origin for the document, causing it to behave as if the \"allow-same-origin\" keyword were always specified. This could allow a Cross-Site Scripting (XSS) attack to be launched from unsafe content. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7823",
"url": "https://www.suse.com/security/cve/CVE-2017-7823"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7823",
"url": "https://bugzilla.suse.com/1060445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7823"
},
{
"cve": "CVE-2017-7824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7824"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7824",
"url": "https://www.suse.com/security/cve/CVE-2017-7824"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7824",
"url": "https://bugzilla.suse.com/1060445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7824"
},
{
"cve": "CVE-2017-7825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7825"
}
],
"notes": [
{
"category": "general",
"text": "Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 56, Firefox ESR \u003c 52.4, and Thunderbird \u003c 52.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7825",
"url": "https://www.suse.com/security/cve/CVE-2017-7825"
},
{
"category": "external",
"summary": "SUSE Bug 1060445 for CVE-2017-7825",
"url": "https://bugzilla.suse.com/1060445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7825"
},
{
"cve": "CVE-2017-7826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7826"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 57, Firefox ESR \u003c 52.5, and Thunderbird \u003c 52.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7826",
"url": "https://www.suse.com/security/cve/CVE-2017-7826"
},
{
"category": "external",
"summary": "SUSE Bug 1068101 for CVE-2017-7826",
"url": "https://bugzilla.suse.com/1068101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7826"
},
{
"cve": "CVE-2017-7828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7828"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when flushing and resizing layout because the \"PressShell\" object has been freed while still in use. This results in a potentially exploitable crash during these operations. This vulnerability affects Firefox \u003c 57, Firefox ESR \u003c 52.5, and Thunderbird \u003c 52.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7828",
"url": "https://www.suse.com/security/cve/CVE-2017-7828"
},
{
"category": "external",
"summary": "SUSE Bug 1068101 for CVE-2017-7828",
"url": "https://bugzilla.suse.com/1068101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7828"
},
{
"cve": "CVE-2017-7829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7829"
}
],
"notes": [
{
"category": "general",
"text": "It is possible to spoof the sender\u0027s email address and display an arbitrary sender address to the email recipient. The real sender\u0027s address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird \u003c 52.5.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7829",
"url": "https://www.suse.com/security/cve/CVE-2017-7829"
},
{
"category": "external",
"summary": "SUSE Bug 1071236 for CVE-2017-7829",
"url": "https://bugzilla.suse.com/1071236"
},
{
"category": "external",
"summary": "SUSE Bug 1074046 for CVE-2017-7829",
"url": "https://bugzilla.suse.com/1074046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-7829"
},
{
"cve": "CVE-2017-7830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7830"
}
],
"notes": [
{
"category": "general",
"text": "The Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same-origin policy violation and could allow for data theft of URLs loaded by users. This vulnerability affects Firefox \u003c 57, Firefox ESR \u003c 52.5, and Thunderbird \u003c 52.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7830",
"url": "https://www.suse.com/security/cve/CVE-2017-7830"
},
{
"category": "external",
"summary": "SUSE Bug 1068101 for CVE-2017-7830",
"url": "https://bugzilla.suse.com/1068101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7830"
},
{
"cve": "CVE-2017-7845",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7845"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Thunderbird \u003c 52.5.2, Firefox ESR \u003c 52.5.2, and Firefox \u003c 57.0.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7845",
"url": "https://www.suse.com/security/cve/CVE-2017-7845"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-7845"
},
{
"cve": "CVE-2017-7846",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7846"
}
],
"notes": [
{
"category": "general",
"text": "It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via \"View -\u003e Feed article -\u003e Website\" or in the standard format of \"View -\u003e Feed article -\u003e default format\". This vulnerability affects Thunderbird \u003c 52.5.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7846",
"url": "https://www.suse.com/security/cve/CVE-2017-7846"
},
{
"category": "external",
"summary": "SUSE Bug 1074043 for CVE-2017-7846",
"url": "https://bugzilla.suse.com/1074043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7846"
},
{
"cve": "CVE-2017-7847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7847"
}
],
"notes": [
{
"category": "general",
"text": "Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird \u003c 52.5.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7847",
"url": "https://www.suse.com/security/cve/CVE-2017-7847"
},
{
"category": "external",
"summary": "SUSE Bug 1074044 for CVE-2017-7847",
"url": "https://bugzilla.suse.com/1074044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-7847"
},
{
"cve": "CVE-2017-7848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7848"
}
],
"notes": [
{
"category": "general",
"text": "RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird \u003c 52.5.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7848",
"url": "https://www.suse.com/security/cve/CVE-2017-7848"
},
{
"category": "external",
"summary": "SUSE Bug 1074045 for CVE-2017-7848",
"url": "https://bugzilla.suse.com/1074045"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-7848"
},
{
"cve": "CVE-2018-12359",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12359"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12359",
"url": "https://www.suse.com/security/cve/CVE-2018-12359"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12359",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12359"
},
{
"cve": "CVE-2018-12360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12360"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12360",
"url": "https://www.suse.com/security/cve/CVE-2018-12360"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12360",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12360"
},
{
"cve": "CVE-2018-12361",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12361"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Firefox ESR \u003c 60.1, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12361",
"url": "https://www.suse.com/security/cve/CVE-2018-12361"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12361",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12361"
},
{
"cve": "CVE-2018-12362",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12362"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12362",
"url": "https://www.suse.com/security/cve/CVE-2018-12362"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12362",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12362"
},
{
"cve": "CVE-2018-12363",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12363"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12363",
"url": "https://www.suse.com/security/cve/CVE-2018-12363"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12363",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12363"
},
{
"cve": "CVE-2018-12364",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12364"
}
],
"notes": [
{
"category": "general",
"text": "NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious site to engage in cross-site request forgery (CSRF) attacks. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12364",
"url": "https://www.suse.com/security/cve/CVE-2018-12364"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12364",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12364"
},
{
"cve": "CVE-2018-12365",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12365"
}
],
"notes": [
{
"category": "general",
"text": "A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12365",
"url": "https://www.suse.com/security/cve/CVE-2018-12365"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12365",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12365"
},
{
"cve": "CVE-2018-12366",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12366"
}
],
"notes": [
{
"category": "general",
"text": "An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12366",
"url": "https://www.suse.com/security/cve/CVE-2018-12366"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12366",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12366"
},
{
"cve": "CVE-2018-12367",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12367"
}
],
"notes": [
{
"category": "general",
"text": "In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTiming was not adjusted but it was found that it could be used as a precision timer. This vulnerability affects Thunderbird \u003c 60, Firefox ESR \u003c 60.1, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12367",
"url": "https://www.suse.com/security/cve/CVE-2018-12367"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12367",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12367"
},
{
"cve": "CVE-2018-12371",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12371"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 60.1, Thunderbird \u003c 60, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12371",
"url": "https://www.suse.com/security/cve/CVE-2018-12371"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-12371",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12371"
},
{
"cve": "CVE-2018-12372",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12372"
}
],
"notes": [
{
"category": "general",
"text": "Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird \u003c 52.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12372",
"url": "https://www.suse.com/security/cve/CVE-2018-12372"
},
{
"category": "external",
"summary": "SUSE Bug 1100082 for CVE-2018-12372",
"url": "https://bugzilla.suse.com/1100082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-12372"
},
{
"cve": "CVE-2018-12373",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12373"
}
],
"notes": [
{
"category": "general",
"text": "dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird \u003c 52.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12373",
"url": "https://www.suse.com/security/cve/CVE-2018-12373"
},
{
"category": "external",
"summary": "SUSE Bug 1100079 for CVE-2018-12373",
"url": "https://bugzilla.suse.com/1100079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-12373"
},
{
"cve": "CVE-2018-12374",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12374"
}
],
"notes": [
{
"category": "general",
"text": "Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vulnerability affects Thunderbird \u003c 52.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12374",
"url": "https://www.suse.com/security/cve/CVE-2018-12374"
},
{
"category": "external",
"summary": "SUSE Bug 1100081 for CVE-2018-12374",
"url": "https://bugzilla.suse.com/1100081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-12374"
},
{
"cve": "CVE-2018-12376",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12376"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 62, Firefox ESR \u003c 60.2, and Thunderbird \u003c 60.2.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12376",
"url": "https://www.suse.com/security/cve/CVE-2018-12376"
},
{
"category": "external",
"summary": "SUSE Bug 1107343 for CVE-2018-12376",
"url": "https://bugzilla.suse.com/1107343"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12376"
},
{
"cve": "CVE-2018-12377",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12377"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 62, Firefox ESR \u003c 60.2, and Thunderbird \u003c 60.2.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12377",
"url": "https://www.suse.com/security/cve/CVE-2018-12377"
},
{
"category": "external",
"summary": "SUSE Bug 1107343 for CVE-2018-12377",
"url": "https://bugzilla.suse.com/1107343"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12377"
},
{
"cve": "CVE-2018-12378",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12378"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 62, Firefox ESR \u003c 60.2, and Thunderbird \u003c 60.2.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12378",
"url": "https://www.suse.com/security/cve/CVE-2018-12378"
},
{
"category": "external",
"summary": "SUSE Bug 1107343 for CVE-2018-12378",
"url": "https://bugzilla.suse.com/1107343"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12378"
},
{
"cve": "CVE-2018-12383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12383"
}
],
"notes": [
{
"category": "general",
"text": "If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Firefox \u003c 62, Firefox ESR \u003c 60.2.1, and Thunderbird \u003c 60.2.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12383",
"url": "https://www.suse.com/security/cve/CVE-2018-12383"
},
{
"category": "external",
"summary": "SUSE Bug 1107343 for CVE-2018-12383",
"url": "https://bugzilla.suse.com/1107343"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12383"
},
{
"cve": "CVE-2018-12385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12385"
}
],
"notes": [
{
"category": "general",
"text": "A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users switching between the Nightly and Release versions of Firefox if the same profile is used. This vulnerability affects Thunderbird \u003c 60.2.1, Firefox ESR \u003c 60.2.1, and Firefox \u003c 62.0.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12385",
"url": "https://www.suse.com/security/cve/CVE-2018-12385"
},
{
"category": "external",
"summary": "SUSE Bug 1109363 for CVE-2018-12385",
"url": "https://bugzilla.suse.com/1109363"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-12385"
},
{
"cve": "CVE-2018-12389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12389"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 60.3 and Thunderbird \u003c 60.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12389",
"url": "https://www.suse.com/security/cve/CVE-2018-12389"
},
{
"category": "external",
"summary": "SUSE Bug 1112852 for CVE-2018-12389",
"url": "https://bugzilla.suse.com/1112852"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12389"
},
{
"cve": "CVE-2018-12390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12390"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 63, Firefox ESR \u003c 60.3, and Thunderbird \u003c 60.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12390",
"url": "https://www.suse.com/security/cve/CVE-2018-12390"
},
{
"category": "external",
"summary": "SUSE Bug 1112852 for CVE-2018-12390",
"url": "https://bugzilla.suse.com/1112852"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12390"
},
{
"cve": "CVE-2018-12391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12391"
}
],
"notes": [
{
"category": "general",
"text": "During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox \u003c 63, Firefox ESR \u003c 60.3, and Thunderbird \u003c 60.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12391",
"url": "https://www.suse.com/security/cve/CVE-2018-12391"
},
{
"category": "external",
"summary": "SUSE Bug 1112852 for CVE-2018-12391",
"url": "https://bugzilla.suse.com/1112852"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12391"
},
{
"cve": "CVE-2018-12392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12392"
}
],
"notes": [
{
"category": "general",
"text": "When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox \u003c 63, Firefox ESR \u003c 60.3, and Thunderbird \u003c 60.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12392",
"url": "https://www.suse.com/security/cve/CVE-2018-12392"
},
{
"category": "external",
"summary": "SUSE Bug 1112852 for CVE-2018-12392",
"url": "https://bugzilla.suse.com/1112852"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12392"
},
{
"cve": "CVE-2018-12393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12393"
}
],
"notes": [
{
"category": "general",
"text": "A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. *Note: 64-bit builds are not vulnerable to this issue.*. This vulnerability affects Firefox \u003c 63, Firefox ESR \u003c 60.3, and Thunderbird \u003c 60.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12393",
"url": "https://www.suse.com/security/cve/CVE-2018-12393"
},
{
"category": "external",
"summary": "SUSE Bug 1112852 for CVE-2018-12393",
"url": "https://bugzilla.suse.com/1112852"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12393"
},
{
"cve": "CVE-2018-12405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12405"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12405",
"url": "https://www.suse.com/security/cve/CVE-2018-12405"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-12405",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-12405",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-12405",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-12405"
},
{
"cve": "CVE-2018-17466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17466"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17466",
"url": "https://www.suse.com/security/cve/CVE-2018-17466"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17466"
},
{
"cve": "CVE-2018-18335",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18335"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18335",
"url": "https://www.suse.com/security/cve/CVE-2018-18335"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18335",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18335",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18335"
},
{
"cve": "CVE-2018-18356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18356"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18356",
"url": "https://www.suse.com/security/cve/CVE-2018-18356"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1125396"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18356"
},
{
"cve": "CVE-2018-18492",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18492"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18492",
"url": "https://www.suse.com/security/cve/CVE-2018-18492"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-18492",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-18492",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-18492",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-18492"
},
{
"cve": "CVE-2018-18493",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18493"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18493",
"url": "https://www.suse.com/security/cve/CVE-2018-18493"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-18493",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-18493",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-18493",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-18493"
},
{
"cve": "CVE-2018-18494",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18494"
}
],
"notes": [
{
"category": "general",
"text": "A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18494",
"url": "https://www.suse.com/security/cve/CVE-2018-18494"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-18494",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-18494",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-18494",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-18494"
},
{
"cve": "CVE-2018-18498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18498"
}
],
"notes": [
{
"category": "general",
"text": "A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird \u003c 60.4, Firefox ESR \u003c 60.4, and Firefox \u003c 64.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18498",
"url": "https://www.suse.com/security/cve/CVE-2018-18498"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-18498",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-18498",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-18498",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-18498"
},
{
"cve": "CVE-2018-18500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18500"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.5, Firefox ESR \u003c 60.5, and Firefox \u003c 65.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18500",
"url": "https://www.suse.com/security/cve/CVE-2018-18500"
},
{
"category": "external",
"summary": "SUSE Bug 1122983 for CVE-2018-18500",
"url": "https://bugzilla.suse.com/1122983"
},
{
"category": "external",
"summary": "SUSE Bug 986639 for CVE-2018-18500",
"url": "https://bugzilla.suse.com/986639"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-18500"
},
{
"cve": "CVE-2018-18501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18501"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.5, Firefox ESR \u003c 60.5, and Firefox \u003c 65.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18501",
"url": "https://www.suse.com/security/cve/CVE-2018-18501"
},
{
"category": "external",
"summary": "SUSE Bug 1122983 for CVE-2018-18501",
"url": "https://bugzilla.suse.com/1122983"
},
{
"category": "external",
"summary": "SUSE Bug 986639 for CVE-2018-18501",
"url": "https://bugzilla.suse.com/986639"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-18501"
},
{
"cve": "CVE-2018-18505",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18505"
}
],
"notes": [
{
"category": "general",
"text": "An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird \u003c 60.5, Firefox ESR \u003c 60.5, and Firefox \u003c 65.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18505",
"url": "https://www.suse.com/security/cve/CVE-2018-18505"
},
{
"category": "external",
"summary": "SUSE Bug 1122983 for CVE-2018-18505",
"url": "https://bugzilla.suse.com/1122983"
},
{
"category": "external",
"summary": "SUSE Bug 986639 for CVE-2018-18505",
"url": "https://bugzilla.suse.com/986639"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-18505"
},
{
"cve": "CVE-2018-18509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18509"
}
],
"notes": [
{
"category": "general",
"text": "A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message contents aren\u0027t covered by the signature. The flaw allows an attacker to reuse a valid S/MIME signature to craft an email message with arbitrary content. This vulnerability affects Thunderbird \u003c 60.5.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18509",
"url": "https://www.suse.com/security/cve/CVE-2018-18509"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18509",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18509"
},
{
"cve": "CVE-2018-18511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18511"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18511",
"url": "https://www.suse.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125396"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18511"
},
{
"cve": "CVE-2018-5089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5089"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5089",
"url": "https://www.suse.com/security/cve/CVE-2018-5089"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5089",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5089"
},
{
"cve": "CVE-2018-5095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5095"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5095",
"url": "https://www.suse.com/security/cve/CVE-2018-5095"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5095",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5095"
},
{
"cve": "CVE-2018-5096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5096"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 52.6 and Thunderbird \u003c 52.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5096",
"url": "https://www.suse.com/security/cve/CVE-2018-5096"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5096",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-5096"
},
{
"cve": "CVE-2018-5097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5097"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5097",
"url": "https://www.suse.com/security/cve/CVE-2018-5097"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5097",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5097"
},
{
"cve": "CVE-2018-5098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5098"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5098",
"url": "https://www.suse.com/security/cve/CVE-2018-5098"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5098",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5098"
},
{
"cve": "CVE-2018-5099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5099"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5099",
"url": "https://www.suse.com/security/cve/CVE-2018-5099"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5099",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5099"
},
{
"cve": "CVE-2018-5102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5102"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5102",
"url": "https://www.suse.com/security/cve/CVE-2018-5102"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5102",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5102"
},
{
"cve": "CVE-2018-5103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5103"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5103",
"url": "https://www.suse.com/security/cve/CVE-2018-5103"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5103",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5103"
},
{
"cve": "CVE-2018-5104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5104"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5104",
"url": "https://www.suse.com/security/cve/CVE-2018-5104"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5104",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5104"
},
{
"cve": "CVE-2018-5117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5117"
}
],
"notes": [
{
"category": "general",
"text": "If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird \u003c 52.6, Firefox ESR \u003c 52.6, and Firefox \u003c 58.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5117",
"url": "https://www.suse.com/security/cve/CVE-2018-5117"
},
{
"category": "external",
"summary": "SUSE Bug 1077291 for CVE-2018-5117",
"url": "https://bugzilla.suse.com/1077291"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-5117"
},
{
"cve": "CVE-2018-5125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5125"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.7, Firefox ESR \u003c 52.7, and Firefox \u003c 59.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5125",
"url": "https://www.suse.com/security/cve/CVE-2018-5125"
},
{
"category": "external",
"summary": "SUSE Bug 1085130 for CVE-2018-5125",
"url": "https://bugzilla.suse.com/1085130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5125"
},
{
"cve": "CVE-2018-5127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5127"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow can occur when manipulating the SVG \"animatedPathSegList\" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.7, Firefox ESR \u003c 52.7, and Firefox \u003c 59.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5127",
"url": "https://www.suse.com/security/cve/CVE-2018-5127"
},
{
"category": "external",
"summary": "SUSE Bug 1085130 for CVE-2018-5127",
"url": "https://bugzilla.suse.com/1085130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5127"
},
{
"cve": "CVE-2018-5129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5129"
}
],
"notes": [
{
"category": "general",
"text": "A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird \u003c 52.7, Firefox ESR \u003c 52.7, and Firefox \u003c 59.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5129",
"url": "https://www.suse.com/security/cve/CVE-2018-5129"
},
{
"category": "external",
"summary": "SUSE Bug 1085130 for CVE-2018-5129",
"url": "https://bugzilla.suse.com/1085130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5129"
},
{
"cve": "CVE-2018-5144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5144"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5144",
"url": "https://www.suse.com/security/cve/CVE-2018-5144"
},
{
"category": "external",
"summary": "SUSE Bug 1085130 for CVE-2018-5144",
"url": "https://bugzilla.suse.com/1085130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-5144"
},
{
"cve": "CVE-2018-5145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5145"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5145",
"url": "https://www.suse.com/security/cve/CVE-2018-5145"
},
{
"category": "external",
"summary": "SUSE Bug 1085130 for CVE-2018-5145",
"url": "https://bugzilla.suse.com/1085130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-5145"
},
{
"cve": "CVE-2018-5146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5146"
}
],
"notes": [
{
"category": "general",
"text": "An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox \u003c 59.0.1, Firefox ESR \u003c 52.7.2, and Thunderbird \u003c 52.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5146",
"url": "https://www.suse.com/security/cve/CVE-2018-5146"
},
{
"category": "external",
"summary": "SUSE Bug 1085671 for CVE-2018-5146",
"url": "https://bugzilla.suse.com/1085671"
},
{
"category": "external",
"summary": "SUSE Bug 1085687 for CVE-2018-5146",
"url": "https://bugzilla.suse.com/1085687"
},
{
"category": "external",
"summary": "SUSE Bug 1180395 for CVE-2018-5146",
"url": "https://bugzilla.suse.com/1180395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5146"
},
{
"cve": "CVE-2018-5150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5150"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.8, Thunderbird ESR \u003c 52.8, Firefox \u003c 60, and Firefox ESR \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5150",
"url": "https://www.suse.com/security/cve/CVE-2018-5150"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5150",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5150",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5150",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5150",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5150",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5150",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5150",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5150"
},
{
"cve": "CVE-2018-5154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5154"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.8, Thunderbird ESR \u003c 52.8, Firefox \u003c 60, and Firefox ESR \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5154",
"url": "https://www.suse.com/security/cve/CVE-2018-5154"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5154",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5154",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5154",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5154",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5154",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5154",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5154",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5154"
},
{
"cve": "CVE-2018-5155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5155"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.8, Thunderbird ESR \u003c 52.8, Firefox \u003c 60, and Firefox ESR \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5155",
"url": "https://www.suse.com/security/cve/CVE-2018-5155"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5155",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5155",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5155",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5155",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5155",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5155",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5155",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5155"
},
{
"cve": "CVE-2018-5156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5156"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5156",
"url": "https://www.suse.com/security/cve/CVE-2018-5156"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-5156",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5156"
},
{
"cve": "CVE-2018-5159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5159"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird \u003c 52.8, Thunderbird ESR \u003c 52.8, Firefox \u003c 60, and Firefox ESR \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5159",
"url": "https://www.suse.com/security/cve/CVE-2018-5159"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5159",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5159",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5159",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5159",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5159",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5159",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5159",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5159"
},
{
"cve": "CVE-2018-5161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5161"
}
],
"notes": [
{
"category": "general",
"text": "Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR \u003c 52.8 and Thunderbird \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5161",
"url": "https://www.suse.com/security/cve/CVE-2018-5161"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5161",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5161",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5161",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5161",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5161",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5161",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5161",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5161"
},
{
"cve": "CVE-2018-5162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5162"
}
],
"notes": [
{
"category": "general",
"text": "Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR \u003c 52.8 and Thunderbird \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5162",
"url": "https://www.suse.com/security/cve/CVE-2018-5162"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5162",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5162",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093151 for CVE-2018-5162",
"url": "https://bugzilla.suse.com/1093151"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5162",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5162",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5162",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5162",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5162",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5162"
},
{
"cve": "CVE-2018-5168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5168"
}
],
"notes": [
{
"category": "general",
"text": "Sites can bypass security checks on permissions to install lightweight themes by manipulating the \"baseURI\" property of the theme element. This could allow a malicious site to install a theme without user interaction which could contain offensive or embarrassing images. This vulnerability affects Thunderbird \u003c 52.8, Thunderbird ESR \u003c 52.8, Firefox \u003c 60, and Firefox ESR \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5168",
"url": "https://www.suse.com/security/cve/CVE-2018-5168"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5168",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5168",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5168",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5168",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5168",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5168",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5168",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5168"
},
{
"cve": "CVE-2018-5170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5170"
}
],
"notes": [
{
"category": "general",
"text": "It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR \u003c 52.8 and Thunderbird \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5170",
"url": "https://www.suse.com/security/cve/CVE-2018-5170"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5170",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5170",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5170",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5170",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5170",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5170",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5170",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5170"
},
{
"cve": "CVE-2018-5174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5174"
}
],
"notes": [
{
"category": "general",
"text": "In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the \"SEE_MASK_FLAG_NO_UI\" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt the user for a decision, and if the user is offline all files will be allowed to be opened because Windows won\u0027t prompt the user to ask what to do. Firefox incorrectly sets this flag when downloading files, leading to less secure behavior from SmartScreen. Note: this issue only affects Windows 10 users running the April 2018 update or later. It does not affect other Windows users or other operating systems. This vulnerability affects Thunderbird \u003c 52.8, Thunderbird ESR \u003c 52.8, Firefox \u003c 60, and Firefox ESR \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5174",
"url": "https://www.suse.com/security/cve/CVE-2018-5174"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5174",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5174",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5174",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5174",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5174",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5174",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5174",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5174"
},
{
"cve": "CVE-2018-5178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5178"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5178",
"url": "https://www.suse.com/security/cve/CVE-2018-5178"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5178",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5178",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5178",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5178",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5178",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5178",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5178",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5178"
},
{
"cve": "CVE-2018-5183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5183"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5183",
"url": "https://www.suse.com/security/cve/CVE-2018-5183"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5183",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5183",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5183",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5183",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5183",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5183",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5183",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5183"
},
{
"cve": "CVE-2018-5184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5184"
}
],
"notes": [
{
"category": "general",
"text": "Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR \u003c 52.8 and Thunderbird \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5184",
"url": "https://www.suse.com/security/cve/CVE-2018-5184"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5184",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5184",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093152 for CVE-2018-5184",
"url": "https://bugzilla.suse.com/1093152"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5184",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5184",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5184",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5184",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5184",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5184"
},
{
"cve": "CVE-2018-5185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5185"
}
],
"notes": [
{
"category": "general",
"text": "Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR \u003c 52.8 and Thunderbird \u003c 52.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5185",
"url": "https://www.suse.com/security/cve/CVE-2018-5185"
},
{
"category": "external",
"summary": "SUSE Bug 1092548 for CVE-2018-5185",
"url": "https://bugzilla.suse.com/1092548"
},
{
"category": "external",
"summary": "SUSE Bug 1092611 for CVE-2018-5185",
"url": "https://bugzilla.suse.com/1092611"
},
{
"category": "external",
"summary": "SUSE Bug 1093151 for CVE-2018-5185",
"url": "https://bugzilla.suse.com/1093151"
},
{
"category": "external",
"summary": "SUSE Bug 1093969 for CVE-2018-5185",
"url": "https://bugzilla.suse.com/1093969"
},
{
"category": "external",
"summary": "SUSE Bug 1093970 for CVE-2018-5185",
"url": "https://bugzilla.suse.com/1093970"
},
{
"category": "external",
"summary": "SUSE Bug 1093971 for CVE-2018-5185",
"url": "https://bugzilla.suse.com/1093971"
},
{
"category": "external",
"summary": "SUSE Bug 1093972 for CVE-2018-5185",
"url": "https://bugzilla.suse.com/1093972"
},
{
"category": "external",
"summary": "SUSE Bug 1093973 for CVE-2018-5185",
"url": "https://bugzilla.suse.com/1093973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5185"
},
{
"cve": "CVE-2018-5187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5187"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60, Firefox ESR \u003c 60.1, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5187",
"url": "https://www.suse.com/security/cve/CVE-2018-5187"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-5187",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5187"
},
{
"cve": "CVE-2018-5188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5188"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5188",
"url": "https://www.suse.com/security/cve/CVE-2018-5188"
},
{
"category": "external",
"summary": "SUSE Bug 1098998 for CVE-2018-5188",
"url": "https://bugzilla.suse.com/1098998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-5188"
},
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-11703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11703"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Thunderbird\u0027s implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11703",
"url": "https://www.suse.com/security/cve/CVE-2019-11703"
},
{
"category": "external",
"summary": "SUSE Bug 1137595 for CVE-2019-11703",
"url": "https://bugzilla.suse.com/1137595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11703"
},
{
"cve": "CVE-2019-11704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11704"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Thunderbird\u0027s implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11704",
"url": "https://www.suse.com/security/cve/CVE-2019-11704"
},
{
"category": "external",
"summary": "SUSE Bug 1137595 for CVE-2019-11704",
"url": "https://bugzilla.suse.com/1137595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11704"
},
{
"cve": "CVE-2019-11705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11705"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Thunderbird\u0027s implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11705",
"url": "https://www.suse.com/security/cve/CVE-2019-11705"
},
{
"category": "external",
"summary": "SUSE Bug 1137595 for CVE-2019-11705",
"url": "https://bugzilla.suse.com/1137595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11705"
},
{
"cve": "CVE-2019-11706",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11706"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Thunderbird\u0027s implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain email messages, resulting in a crash. This vulnerability affects Thunderbird \u003c 60.7.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11706",
"url": "https://www.suse.com/security/cve/CVE-2019-11706"
},
{
"category": "external",
"summary": "SUSE Bug 1137595 for CVE-2019-11706",
"url": "https://bugzilla.suse.com/1137595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11706"
},
{
"cve": "CVE-2019-11707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11707"
}
],
"notes": [
{
"category": "general",
"text": "A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR \u003c 60.7.1, Firefox \u003c 67.0.3, and Thunderbird \u003c 60.7.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11707",
"url": "https://www.suse.com/security/cve/CVE-2019-11707"
},
{
"category": "external",
"summary": "SUSE Bug 1138614 for CVE-2019-11707",
"url": "https://bugzilla.suse.com/1138614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11707"
},
{
"cve": "CVE-2019-11708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11708"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user\u0027s computer. This vulnerability affects Firefox ESR \u003c 60.7.2, Firefox \u003c 67.0.4, and Thunderbird \u003c 60.7.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11708",
"url": "https://www.suse.com/security/cve/CVE-2019-11708"
},
{
"category": "external",
"summary": "SUSE Bug 1138872 for CVE-2019-11708",
"url": "https://bugzilla.suse.com/1138872"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-11708"
},
{
"cve": "CVE-2019-11709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11709"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11709",
"url": "https://www.suse.com/security/cve/CVE-2019-11709"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11709",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11709"
},
{
"cve": "CVE-2019-11711",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11711"
}
],
"notes": [
{
"category": "general",
"text": "When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperatively use document.domain, then either page can abuse this to inject script into arbitrary pages on the other subdomain, even those that did not use document.domain to relax their origin security. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11711",
"url": "https://www.suse.com/security/cve/CVE-2019-11711"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11711",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11711"
},
{
"cve": "CVE-2019-11712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11712"
}
],
"notes": [
{
"category": "general",
"text": "POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery (CSRF) attacks. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11712",
"url": "https://www.suse.com/security/cve/CVE-2019-11712"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11712",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11712"
},
{
"cve": "CVE-2019-11713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11713"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11713",
"url": "https://www.suse.com/security/cve/CVE-2019-11713"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11713",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11713"
},
{
"cve": "CVE-2019-11715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11715"
}
],
"notes": [
{
"category": "general",
"text": "Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11715",
"url": "https://www.suse.com/security/cve/CVE-2019-11715"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11715",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11715"
},
{
"cve": "CVE-2019-11717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11717"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists where the caret (\"^\") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11717",
"url": "https://www.suse.com/security/cve/CVE-2019-11717"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11717",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11717"
},
{
"cve": "CVE-2019-11719",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11719"
}
],
"notes": [
{
"category": "general",
"text": "When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11719",
"url": "https://www.suse.com/security/cve/CVE-2019-11719"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11719",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11719"
},
{
"cve": "CVE-2019-11729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11729"
}
],
"notes": [
{
"category": "general",
"text": "Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11729",
"url": "https://www.suse.com/security/cve/CVE-2019-11729"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11729",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11729"
},
{
"cve": "CVE-2019-11730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11730"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. It was demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app\u0027s predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11730",
"url": "https://www.suse.com/security/cve/CVE-2019-11730"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-11730",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11730"
},
{
"cve": "CVE-2019-11739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11739"
}
],
"notes": [
{
"category": "general",
"text": "Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird \u003c 68.1 and Thunderbird \u003c 60.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11739",
"url": "https://www.suse.com/security/cve/CVE-2019-11739"
},
{
"category": "external",
"summary": "SUSE Bug 1150939 for CVE-2019-11739",
"url": "https://bugzilla.suse.com/1150939"
},
{
"category": "external",
"summary": "SUSE Bug 1150940 for CVE-2019-11739",
"url": "https://bugzilla.suse.com/1150940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11739"
},
{
"cve": "CVE-2019-11740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11740"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 69, Thunderbird \u003c 68.1, Thunderbird \u003c 60.9, Firefox ESR \u003c 60.9, and Firefox ESR \u003c 68.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11740",
"url": "https://www.suse.com/security/cve/CVE-2019-11740"
},
{
"category": "external",
"summary": "SUSE Bug 1149299 for CVE-2019-11740",
"url": "https://bugzilla.suse.com/1149299"
},
{
"category": "external",
"summary": "SUSE Bug 1149323 for CVE-2019-11740",
"url": "https://bugzilla.suse.com/1149323"
},
{
"category": "external",
"summary": "SUSE Bug 1149324 for CVE-2019-11740",
"url": "https://bugzilla.suse.com/1149324"
},
{
"category": "external",
"summary": "SUSE Bug 1150940 for CVE-2019-11740",
"url": "https://bugzilla.suse.com/1150940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11740"
},
{
"cve": "CVE-2019-11742",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11742"
}
],
"notes": [
{
"category": "general",
"text": "A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a \u0026lt;canvas\u0026gt; element due to an error in how same-origin policy is applied to cached image content. The resulting same-origin policy violation could allow for data theft. This vulnerability affects Firefox \u003c 69, Thunderbird \u003c 68.1, Thunderbird \u003c 60.9, Firefox ESR \u003c 60.9, and Firefox ESR \u003c 68.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11742",
"url": "https://www.suse.com/security/cve/CVE-2019-11742"
},
{
"category": "external",
"summary": "SUSE Bug 1149303 for CVE-2019-11742",
"url": "https://bugzilla.suse.com/1149303"
},
{
"category": "external",
"summary": "SUSE Bug 1149323 for CVE-2019-11742",
"url": "https://bugzilla.suse.com/1149323"
},
{
"category": "external",
"summary": "SUSE Bug 1149324 for CVE-2019-11742",
"url": "https://bugzilla.suse.com/1149324"
},
{
"category": "external",
"summary": "SUSE Bug 1150940 for CVE-2019-11742",
"url": "https://bugzilla.suse.com/1150940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11742"
},
{
"cve": "CVE-2019-11743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11743"
}
],
"notes": [
{
"category": "general",
"text": "Navigation events were not fully adhering to the W3C\u0027s \"Navigation-Timing Level 2\" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history through timing side-channel attacks. This vulnerability affects Firefox \u003c 69, Thunderbird \u003c 68.1, Thunderbird \u003c 60.9, Firefox ESR \u003c 60.9, and Firefox ESR \u003c 68.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11743",
"url": "https://www.suse.com/security/cve/CVE-2019-11743"
},
{
"category": "external",
"summary": "SUSE Bug 1149298 for CVE-2019-11743",
"url": "https://bugzilla.suse.com/1149298"
},
{
"category": "external",
"summary": "SUSE Bug 1149323 for CVE-2019-11743",
"url": "https://bugzilla.suse.com/1149323"
},
{
"category": "external",
"summary": "SUSE Bug 1149324 for CVE-2019-11743",
"url": "https://bugzilla.suse.com/1149324"
},
{
"category": "external",
"summary": "SUSE Bug 1150940 for CVE-2019-11743",
"url": "https://bugzilla.suse.com/1150940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11743"
},
{
"cve": "CVE-2019-11744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11744"
}
],
"notes": [
{
"category": "general",
"text": "Some HTML elements, such as \u0026lt;title\u0026gt; and \u0026lt;textarea\u0026gt;, can contain literal angle brackets without treating them as markup. It is possible to pass a literal closing tag to .innerHTML on these elements, and subsequent content after that will be parsed as if it were outside the tag. This can lead to XSS if a site does not filter user input as strictly for these elements as it does for other elements. This vulnerability affects Firefox \u003c 69, Thunderbird \u003c 68.1, Thunderbird \u003c 60.9, Firefox ESR \u003c 60.9, and Firefox ESR \u003c 68.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11744",
"url": "https://www.suse.com/security/cve/CVE-2019-11744"
},
{
"category": "external",
"summary": "SUSE Bug 1149304 for CVE-2019-11744",
"url": "https://bugzilla.suse.com/1149304"
},
{
"category": "external",
"summary": "SUSE Bug 1149323 for CVE-2019-11744",
"url": "https://bugzilla.suse.com/1149323"
},
{
"category": "external",
"summary": "SUSE Bug 1149324 for CVE-2019-11744",
"url": "https://bugzilla.suse.com/1149324"
},
{
"category": "external",
"summary": "SUSE Bug 1150940 for CVE-2019-11744",
"url": "https://bugzilla.suse.com/1150940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11744"
},
{
"cve": "CVE-2019-11746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11746"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 69, Thunderbird \u003c 68.1, Thunderbird \u003c 60.9, Firefox ESR \u003c 60.9, and Firefox ESR \u003c 68.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11746",
"url": "https://www.suse.com/security/cve/CVE-2019-11746"
},
{
"category": "external",
"summary": "SUSE Bug 1149297 for CVE-2019-11746",
"url": "https://bugzilla.suse.com/1149297"
},
{
"category": "external",
"summary": "SUSE Bug 1149323 for CVE-2019-11746",
"url": "https://bugzilla.suse.com/1149323"
},
{
"category": "external",
"summary": "SUSE Bug 1149324 for CVE-2019-11746",
"url": "https://bugzilla.suse.com/1149324"
},
{
"category": "external",
"summary": "SUSE Bug 1150940 for CVE-2019-11746",
"url": "https://bugzilla.suse.com/1150940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11746"
},
{
"cve": "CVE-2019-11752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11752"
}
],
"notes": [
{
"category": "general",
"text": "It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox \u003c 69, Thunderbird \u003c 68.1, Thunderbird \u003c 60.9, Firefox ESR \u003c 60.9, and Firefox ESR \u003c 68.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11752",
"url": "https://www.suse.com/security/cve/CVE-2019-11752"
},
{
"category": "external",
"summary": "SUSE Bug 1149296 for CVE-2019-11752",
"url": "https://bugzilla.suse.com/1149296"
},
{
"category": "external",
"summary": "SUSE Bug 1149323 for CVE-2019-11752",
"url": "https://bugzilla.suse.com/1149323"
},
{
"category": "external",
"summary": "SUSE Bug 1149324 for CVE-2019-11752",
"url": "https://bugzilla.suse.com/1149324"
},
{
"category": "external",
"summary": "SUSE Bug 1150940 for CVE-2019-11752",
"url": "https://bugzilla.suse.com/1150940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11752"
},
{
"cve": "CVE-2019-11755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11755"
}
],
"notes": [
{
"category": "general",
"text": "A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the signer might have had no access to the contents of the encrypted message, and might have stripped a different signature from the encrypted message. Previous versions had only suppressed showing a digital signature for messages with an outer multipart/signed layer. This vulnerability affects Thunderbird \u003c 68.1.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11755",
"url": "https://www.suse.com/security/cve/CVE-2019-11755"
},
{
"category": "external",
"summary": "SUSE Bug 1152375 for CVE-2019-11755",
"url": "https://bugzilla.suse.com/1152375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11755"
},
{
"cve": "CVE-2019-11757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11757"
}
],
"notes": [
{
"category": "general",
"text": "When following the value\u0027s prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox \u003c 70, Thunderbird \u003c 68.2, and Firefox ESR \u003c 68.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11757",
"url": "https://www.suse.com/security/cve/CVE-2019-11757"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-11757",
"url": "https://bugzilla.suse.com/1154738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11757"
},
{
"cve": "CVE-2019-11758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11758"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installed. This bug showed evidence of memory corruption in the accessibility engine and we presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 69, Thunderbird \u003c 68.2, and Firefox ESR \u003c 68.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11758",
"url": "https://www.suse.com/security/cve/CVE-2019-11758"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-11758",
"url": "https://bugzilla.suse.com/1154738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11758"
},
{
"cve": "CVE-2019-11759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11759"
}
],
"notes": [
{
"category": "general",
"text": "An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute arbitrary code or more likely lead to a crash. This vulnerability affects Firefox \u003c 70, Thunderbird \u003c 68.2, and Firefox ESR \u003c 68.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11759",
"url": "https://www.suse.com/security/cve/CVE-2019-11759"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-11759",
"url": "https://bugzilla.suse.com/1154738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11759"
},
{
"cve": "CVE-2019-11760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11760"
}
],
"notes": [
{
"category": "general",
"text": "A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vulnerability affects Firefox \u003c 70, Thunderbird \u003c 68.2, and Firefox ESR \u003c 68.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11760",
"url": "https://www.suse.com/security/cve/CVE-2019-11760"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-11760",
"url": "https://bugzilla.suse.com/1154738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11760"
},
{
"cve": "CVE-2019-11761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11761"
}
],
"notes": [
{
"category": "general",
"text": "By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox \u003c 70, Thunderbird \u003c 68.2, and Firefox ESR \u003c 68.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11761",
"url": "https://www.suse.com/security/cve/CVE-2019-11761"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-11761",
"url": "https://bugzilla.suse.com/1154738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11761"
},
{
"cve": "CVE-2019-11762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11762"
}
],
"notes": [
{
"category": "general",
"text": "If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on the now-cross-origin window. This vulnerability affects Firefox \u003c 70, Thunderbird \u003c 68.2, and Firefox ESR \u003c 68.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11762",
"url": "https://www.suse.com/security/cve/CVE-2019-11762"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-11762",
"url": "https://bugzilla.suse.com/1154738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11762"
},
{
"cve": "CVE-2019-11763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11763"
}
],
"notes": [
{
"category": "general",
"text": "Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML comment text being treated as HTML which could have led to XSS in a web application under certain conditions. It could have also led to HTML entities being masked from filters - enabling the use of entities to mask the actual characters of interest from filters. This vulnerability affects Firefox \u003c 70, Thunderbird \u003c 68.2, and Firefox ESR \u003c 68.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11763",
"url": "https://www.suse.com/security/cve/CVE-2019-11763"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-11763",
"url": "https://bugzilla.suse.com/1154738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11763"
},
{
"cve": "CVE-2019-11764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11764"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 70, Thunderbird \u003c 68.2, and Firefox ESR \u003c 68.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11764",
"url": "https://www.suse.com/security/cve/CVE-2019-11764"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-11764",
"url": "https://bugzilla.suse.com/1154738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-11764"
},
{
"cve": "CVE-2019-13722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13722"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13722",
"url": "https://www.suse.com/security/cve/CVE-2019-13722"
},
{
"category": "external",
"summary": "SUSE Bug 1158328 for CVE-2019-13722",
"url": "https://bugzilla.suse.com/1158328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13722"
},
{
"cve": "CVE-2019-15903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15903"
}
],
"notes": [
{
"category": "general",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15903",
"url": "https://www.suse.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "SUSE Bug 1149429 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1149429"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1154738"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-15903"
},
{
"cve": "CVE-2019-17005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17005"
}
],
"notes": [
{
"category": "general",
"text": "The plain text serializer used a fixed-size array for the number of \u003col\u003e elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17005",
"url": "https://www.suse.com/security/cve/CVE-2019-17005"
},
{
"category": "external",
"summary": "SUSE Bug 1158328 for CVE-2019-17005",
"url": "https://bugzilla.suse.com/1158328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17005"
},
{
"cve": "CVE-2019-17008",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17008"
}
],
"notes": [
{
"category": "general",
"text": "When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17008",
"url": "https://www.suse.com/security/cve/CVE-2019-17008"
},
{
"category": "external",
"summary": "SUSE Bug 1158328 for CVE-2019-17008",
"url": "https://bugzilla.suse.com/1158328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17008"
},
{
"cve": "CVE-2019-17010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17010"
}
],
"notes": [
{
"category": "general",
"text": "Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17010",
"url": "https://www.suse.com/security/cve/CVE-2019-17010"
},
{
"category": "external",
"summary": "SUSE Bug 1158328 for CVE-2019-17010",
"url": "https://bugzilla.suse.com/1158328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17010"
},
{
"cve": "CVE-2019-17011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17011"
}
],
"notes": [
{
"category": "general",
"text": "Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17011",
"url": "https://www.suse.com/security/cve/CVE-2019-17011"
},
{
"category": "external",
"summary": "SUSE Bug 1158328 for CVE-2019-17011",
"url": "https://bugzilla.suse.com/1158328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17011"
},
{
"cve": "CVE-2019-17012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17012"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 68.3, Firefox ESR \u003c 68.3, and Firefox \u003c 71.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17012",
"url": "https://www.suse.com/security/cve/CVE-2019-17012"
},
{
"category": "external",
"summary": "SUSE Bug 1158328 for CVE-2019-17012",
"url": "https://bugzilla.suse.com/1158328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17012"
},
{
"cve": "CVE-2019-17015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17015"
}
],
"notes": [
{
"category": "general",
"text": "During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR \u003c 68.4 and Firefox \u003c 72.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17015",
"url": "https://www.suse.com/security/cve/CVE-2019-17015"
},
{
"category": "external",
"summary": "SUSE Bug 1160305 for CVE-2019-17015",
"url": "https://bugzilla.suse.com/1160305"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17015"
},
{
"cve": "CVE-2019-17016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17016"
}
],
"notes": [
{
"category": "general",
"text": "When pasting a \u0026lt;style\u0026gt; tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR \u003c 68.4 and Firefox \u003c 72.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17016",
"url": "https://www.suse.com/security/cve/CVE-2019-17016"
},
{
"category": "external",
"summary": "SUSE Bug 1160305 for CVE-2019-17016",
"url": "https://bugzilla.suse.com/1160305"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17016"
},
{
"cve": "CVE-2019-17017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17017"
}
],
"notes": [
{
"category": "general",
"text": "Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 68.4 and Firefox \u003c 72.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17017",
"url": "https://www.suse.com/security/cve/CVE-2019-17017"
},
{
"category": "external",
"summary": "SUSE Bug 1160305 for CVE-2019-17017",
"url": "https://bugzilla.suse.com/1160305"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17017"
},
{
"cve": "CVE-2019-17021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17021"
}
],
"notes": [
{
"category": "general",
"text": "During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses from the parent process. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR \u003c 68.4 and Firefox \u003c 72.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17021",
"url": "https://www.suse.com/security/cve/CVE-2019-17021"
},
{
"category": "external",
"summary": "SUSE Bug 1160305 for CVE-2019-17021",
"url": "https://bugzilla.suse.com/1160305"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17021"
},
{
"cve": "CVE-2019-17022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17022"
}
],
"notes": [
{
"category": "general",
"text": "When pasting a \u0026lt;style\u0026gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape \u0026lt; and \u0026gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node\u0027s innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR \u003c 68.4 and Firefox \u003c 72.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17022",
"url": "https://www.suse.com/security/cve/CVE-2019-17022"
},
{
"category": "external",
"summary": "SUSE Bug 1160305 for CVE-2019-17022",
"url": "https://bugzilla.suse.com/1160305"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17022"
},
{
"cve": "CVE-2019-17024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17024"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 68.4 and Firefox \u003c 72.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17024",
"url": "https://www.suse.com/security/cve/CVE-2019-17024"
},
{
"category": "external",
"summary": "SUSE Bug 1160305 for CVE-2019-17024",
"url": "https://bugzilla.suse.com/1160305"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17024"
},
{
"cve": "CVE-2019-17026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17026"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR \u003c 68.4.1, Thunderbird \u003c 68.4.1, and Firefox \u003c 72.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17026",
"url": "https://www.suse.com/security/cve/CVE-2019-17026"
},
{
"category": "external",
"summary": "SUSE Bug 1160498 for CVE-2019-17026",
"url": "https://bugzilla.suse.com/1160498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17026"
},
{
"cve": "CVE-2019-20503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20503"
}
],
"notes": [
{
"category": "general",
"text": "usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20503",
"url": "https://www.suse.com/security/cve/CVE-2019-20503"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2019-20503",
"url": "https://bugzilla.suse.com/1166238"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2019-20503",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-20503"
},
{
"cve": "CVE-2019-5785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5785"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5785",
"url": "https://www.suse.com/security/cve/CVE-2019-5785"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2019-5785",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2019-5785",
"url": "https://bugzilla.suse.com/1125396"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5785"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9797"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9797",
"url": "https://www.suse.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "SUSE Bug 1129821 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1129821"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9797"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9810"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox \u003c 66.0.1, Firefox ESR \u003c 60.6.1, and Thunderbird \u003c 60.6.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9810",
"url": "https://www.suse.com/security/cve/CVE-2019-9810"
},
{
"category": "external",
"summary": "SUSE Bug 1129821 for CVE-2019-9810",
"url": "https://bugzilla.suse.com/1129821"
},
{
"category": "external",
"summary": "SUSE Bug 1130262 for CVE-2019-9810",
"url": "https://bugzilla.suse.com/1130262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9810"
},
{
"cve": "CVE-2019-9811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9811"
}
],
"notes": [
{
"category": "general",
"text": "As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9811",
"url": "https://www.suse.com/security/cve/CVE-2019-9811"
},
{
"category": "external",
"summary": "SUSE Bug 1140868 for CVE-2019-9811",
"url": "https://bugzilla.suse.com/1140868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9811"
},
{
"cve": "CVE-2019-9813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9813"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox \u003c 66.0.1, Firefox ESR \u003c 60.6.1, and Thunderbird \u003c 60.6.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9813",
"url": "https://www.suse.com/security/cve/CVE-2019-9813"
},
{
"category": "external",
"summary": "SUSE Bug 1129821 for CVE-2019-9813",
"url": "https://bugzilla.suse.com/1129821"
},
{
"category": "external",
"summary": "SUSE Bug 1130262 for CVE-2019-9813",
"url": "https://bugzilla.suse.com/1130262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9813"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
},
{
"cve": "CVE-2020-12387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12387"
}
],
"notes": [
{
"category": "general",
"text": "A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 68.8, Firefox \u003c 76, and Thunderbird \u003c 68.8.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12387",
"url": "https://www.suse.com/security/cve/CVE-2020-12387"
},
{
"category": "external",
"summary": "SUSE Bug 1171186 for CVE-2020-12387",
"url": "https://bugzilla.suse.com/1171186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12387"
},
{
"cve": "CVE-2020-12392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12392"
}
],
"notes": [
{
"category": "general",
"text": "The \u0027Copy as cURL\u0027 feature of Devtools\u0027 network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the \u0027Copy as cURL\u0027 feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This vulnerability affects Firefox ESR \u003c 68.8, Firefox \u003c 76, and Thunderbird \u003c 68.8.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12392",
"url": "https://www.suse.com/security/cve/CVE-2020-12392"
},
{
"category": "external",
"summary": "SUSE Bug 1171186 for CVE-2020-12392",
"url": "https://bugzilla.suse.com/1171186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12392"
},
{
"cve": "CVE-2020-12393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12393"
}
],
"notes": [
{
"category": "general",
"text": "The \u0027Copy as cURL\u0027 feature of Devtools\u0027 network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the \u0027Copy as cURL\u0027 feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR \u003c 68.8, Firefox \u003c 76, and Thunderbird \u003c 68.8.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12393",
"url": "https://www.suse.com/security/cve/CVE-2020-12393"
},
{
"category": "external",
"summary": "SUSE Bug 1171186 for CVE-2020-12393",
"url": "https://bugzilla.suse.com/1171186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12393"
},
{
"cve": "CVE-2020-12395",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12395"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 68.8, Firefox \u003c 76, and Thunderbird \u003c 68.8.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12395",
"url": "https://www.suse.com/security/cve/CVE-2020-12395"
},
{
"category": "external",
"summary": "SUSE Bug 1171186 for CVE-2020-12395",
"url": "https://bugzilla.suse.com/1171186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12395"
},
{
"cve": "CVE-2020-12397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12397"
}
],
"notes": [
{
"category": "general",
"text": "By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird \u003c 68.8.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12397",
"url": "https://www.suse.com/security/cve/CVE-2020-12397"
},
{
"category": "external",
"summary": "SUSE Bug 1171186 for CVE-2020-12397",
"url": "https://bugzilla.suse.com/1171186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-12397"
},
{
"cve": "CVE-2020-12398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12398"
}
],
"notes": [
{
"category": "general",
"text": "If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird \u003c 68.9.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12398",
"url": "https://www.suse.com/security/cve/CVE-2020-12398"
},
{
"category": "external",
"summary": "SUSE Bug 1172402 for CVE-2020-12398",
"url": "https://bugzilla.suse.com/1172402"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12398"
},
{
"cve": "CVE-2020-12405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12405"
}
],
"notes": [
{
"category": "general",
"text": "When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.9.0, Firefox \u003c 77, and Firefox ESR \u003c 68.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12405",
"url": "https://www.suse.com/security/cve/CVE-2020-12405"
},
{
"category": "external",
"summary": "SUSE Bug 1172402 for CVE-2020-12405",
"url": "https://bugzilla.suse.com/1172402"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12405"
},
{
"cve": "CVE-2020-12406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12406"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 68.9.0, Firefox \u003c 77, and Firefox ESR \u003c 68.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12406",
"url": "https://www.suse.com/security/cve/CVE-2020-12406"
},
{
"category": "external",
"summary": "SUSE Bug 1172402 for CVE-2020-12406",
"url": "https://bugzilla.suse.com/1172402"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12406"
},
{
"cve": "CVE-2020-12410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12410"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 68.9.0, Firefox \u003c 77, and Firefox ESR \u003c 68.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12410",
"url": "https://www.suse.com/security/cve/CVE-2020-12410"
},
{
"category": "external",
"summary": "SUSE Bug 1172402 for CVE-2020-12410",
"url": "https://bugzilla.suse.com/1172402"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12410"
},
{
"cve": "CVE-2020-12417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12417"
}
],
"notes": [
{
"category": "general",
"text": "Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox on ARM64 platforms.* This vulnerability affects Firefox ESR \u003c 68.10, Firefox \u003c 78, and Thunderbird \u003c 68.10.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12417",
"url": "https://www.suse.com/security/cve/CVE-2020-12417"
},
{
"category": "external",
"summary": "SUSE Bug 1173576 for CVE-2020-12417",
"url": "https://bugzilla.suse.com/1173576"
},
{
"category": "external",
"summary": "SUSE Bug 1174230 for CVE-2020-12417",
"url": "https://bugzilla.suse.com/1174230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12417"
},
{
"cve": "CVE-2020-12418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12418"
}
],
"notes": [
{
"category": "general",
"text": "Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR \u003c 68.10, Firefox \u003c 78, and Thunderbird \u003c 68.10.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12418",
"url": "https://www.suse.com/security/cve/CVE-2020-12418"
},
{
"category": "external",
"summary": "SUSE Bug 1173576 for CVE-2020-12418",
"url": "https://bugzilla.suse.com/1173576"
},
{
"category": "external",
"summary": "SUSE Bug 1174230 for CVE-2020-12418",
"url": "https://bugzilla.suse.com/1174230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12418"
},
{
"cve": "CVE-2020-12419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12419"
}
],
"notes": [
{
"category": "general",
"text": "When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 68.10, Firefox \u003c 78, and Thunderbird \u003c 68.10.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12419",
"url": "https://www.suse.com/security/cve/CVE-2020-12419"
},
{
"category": "external",
"summary": "SUSE Bug 1173576 for CVE-2020-12419",
"url": "https://bugzilla.suse.com/1173576"
},
{
"category": "external",
"summary": "SUSE Bug 1174230 for CVE-2020-12419",
"url": "https://bugzilla.suse.com/1174230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12419"
},
{
"cve": "CVE-2020-12420",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12420"
}
],
"notes": [
{
"category": "general",
"text": "When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 68.10, Firefox \u003c 78, and Thunderbird \u003c 68.10.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12420",
"url": "https://www.suse.com/security/cve/CVE-2020-12420"
},
{
"category": "external",
"summary": "SUSE Bug 1173576 for CVE-2020-12420",
"url": "https://bugzilla.suse.com/1173576"
},
{
"category": "external",
"summary": "SUSE Bug 1174230 for CVE-2020-12420",
"url": "https://bugzilla.suse.com/1174230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12420"
},
{
"cve": "CVE-2020-12421",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12421"
}
],
"notes": [
{
"category": "general",
"text": "When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date silently without notification to the user. This vulnerability affects Firefox ESR \u003c 68.10, Firefox \u003c 78, and Thunderbird \u003c 68.10.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12421",
"url": "https://www.suse.com/security/cve/CVE-2020-12421"
},
{
"category": "external",
"summary": "SUSE Bug 1173576 for CVE-2020-12421",
"url": "https://bugzilla.suse.com/1173576"
},
{
"category": "external",
"summary": "SUSE Bug 1174230 for CVE-2020-12421",
"url": "https://bugzilla.suse.com/1174230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12421"
},
{
"cve": "CVE-2020-15652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15652"
}
],
"notes": [
{
"category": "general",
"text": "By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox \u003c 79, Firefox ESR \u003c 68.11, Firefox ESR \u003c 78.1, Thunderbird \u003c 68.11, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15652",
"url": "https://www.suse.com/security/cve/CVE-2020-15652"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15652",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15652"
},
{
"cve": "CVE-2020-15659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15659"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 79, Firefox ESR \u003c 68.11, Firefox ESR \u003c 78.1, Thunderbird \u003c 68.11, and Thunderbird \u003c 78.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15659",
"url": "https://www.suse.com/security/cve/CVE-2020-15659"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-15659",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15659"
},
{
"cve": "CVE-2020-15663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15663"
}
],
"notes": [
{
"category": "general",
"text": "If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 80, Thunderbird \u003c 78.2, Thunderbird \u003c 68.12, Firefox ESR \u003c 68.12, and Firefox ESR \u003c 78.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15663",
"url": "https://www.suse.com/security/cve/CVE-2020-15663"
},
{
"category": "external",
"summary": "SUSE Bug 1175686 for CVE-2020-15663",
"url": "https://bugzilla.suse.com/1175686"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15663"
},
{
"cve": "CVE-2020-15664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15664"
}
],
"notes": [
{
"category": "general",
"text": "By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox \u003c 80, Thunderbird \u003c 78.2, Thunderbird \u003c 68.12, Firefox ESR \u003c 68.12, Firefox ESR \u003c 78.2, and Firefox for Android \u003c 80.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15664",
"url": "https://www.suse.com/security/cve/CVE-2020-15664"
},
{
"category": "external",
"summary": "SUSE Bug 1175686 for CVE-2020-15664",
"url": "https://bugzilla.suse.com/1175686"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15664"
},
{
"cve": "CVE-2020-15669",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15669"
}
],
"notes": [
{
"category": "general",
"text": "When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 68.12 and Thunderbird \u003c 68.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15669",
"url": "https://www.suse.com/security/cve/CVE-2020-15669"
},
{
"category": "external",
"summary": "SUSE Bug 1175686 for CVE-2020-15669",
"url": "https://bugzilla.suse.com/1175686"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15669"
},
{
"cve": "CVE-2020-15673",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15673"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15673",
"url": "https://www.suse.com/security/cve/CVE-2020-15673"
},
{
"category": "external",
"summary": "SUSE Bug 1176756 for CVE-2020-15673",
"url": "https://bugzilla.suse.com/1176756"
},
{
"category": "external",
"summary": "SUSE Bug 1176899 for CVE-2020-15673",
"url": "https://bugzilla.suse.com/1176899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15673"
},
{
"cve": "CVE-2020-15676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15676"
}
],
"notes": [
{
"category": "general",
"text": "Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15676",
"url": "https://www.suse.com/security/cve/CVE-2020-15676"
},
{
"category": "external",
"summary": "SUSE Bug 1176756 for CVE-2020-15676",
"url": "https://bugzilla.suse.com/1176756"
},
{
"category": "external",
"summary": "SUSE Bug 1176899 for CVE-2020-15676",
"url": "https://bugzilla.suse.com/1176899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15676"
},
{
"cve": "CVE-2020-15677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15677"
}
],
"notes": [
{
"category": "general",
"text": "By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than the site the file was actually downloaded from. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15677",
"url": "https://www.suse.com/security/cve/CVE-2020-15677"
},
{
"category": "external",
"summary": "SUSE Bug 1176756 for CVE-2020-15677",
"url": "https://bugzilla.suse.com/1176756"
},
{
"category": "external",
"summary": "SUSE Bug 1176899 for CVE-2020-15677",
"url": "https://bugzilla.suse.com/1176899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15677"
},
{
"cve": "CVE-2020-15678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15678"
}
],
"notes": [
{
"category": "general",
"text": "When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15678",
"url": "https://www.suse.com/security/cve/CVE-2020-15678"
},
{
"category": "external",
"summary": "SUSE Bug 1176756 for CVE-2020-15678",
"url": "https://bugzilla.suse.com/1176756"
},
{
"category": "external",
"summary": "SUSE Bug 1176899 for CVE-2020-15678",
"url": "https://bugzilla.suse.com/1176899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15678"
},
{
"cve": "CVE-2020-15683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15683"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 78.4, Firefox \u003c 82, and Thunderbird \u003c 78.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15683",
"url": "https://www.suse.com/security/cve/CVE-2020-15683"
},
{
"category": "external",
"summary": "SUSE Bug 1177872 for CVE-2020-15683",
"url": "https://bugzilla.suse.com/1177872"
},
{
"category": "external",
"summary": "SUSE Bug 1177977 for CVE-2020-15683",
"url": "https://bugzilla.suse.com/1177977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15683"
},
{
"cve": "CVE-2020-15685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15685"
}
],
"notes": [
{
"category": "general",
"text": "During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird \u003c 78.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15685",
"url": "https://www.suse.com/security/cve/CVE-2020-15685"
},
{
"category": "external",
"summary": "SUSE Bug 1181414 for CVE-2020-15685",
"url": "https://bugzilla.suse.com/1181414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15685"
},
{
"cve": "CVE-2020-15969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15969"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15969",
"url": "https://www.suse.com/security/cve/CVE-2020-15969"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177408"
},
{
"category": "external",
"summary": "SUSE Bug 1177872 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177872"
},
{
"category": "external",
"summary": "SUSE Bug 1177977 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15969"
},
{
"cve": "CVE-2020-15999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15999"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15999",
"url": "https://www.suse.com/security/cve/CVE-2020-15999"
},
{
"category": "external",
"summary": "SUSE Bug 1177914 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1177914"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1177936"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15999"
},
{
"cve": "CVE-2020-16012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16012"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16012",
"url": "https://www.suse.com/security/cve/CVE-2020-16012"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178894"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16012"
},
{
"cve": "CVE-2020-16042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16042"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16042",
"url": "https://www.suse.com/security/cve/CVE-2020-16042"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16042",
"url": "https://bugzilla.suse.com/1179576"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-16042",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16042"
},
{
"cve": "CVE-2020-16044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16044"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16044",
"url": "https://www.suse.com/security/cve/CVE-2020-16044"
},
{
"category": "external",
"summary": "SUSE Bug 1180623 for CVE-2020-16044",
"url": "https://bugzilla.suse.com/1180623"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2020-16044",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16044"
},
{
"cve": "CVE-2020-26950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26950"
}
],
"notes": [
{
"category": "general",
"text": "In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox \u003c 82.0.3, Firefox ESR \u003c 78.4.1, and Thunderbird \u003c 78.4.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26950",
"url": "https://www.suse.com/security/cve/CVE-2020-26950"
},
{
"category": "external",
"summary": "SUSE Bug 1177872 for CVE-2020-26950",
"url": "https://bugzilla.suse.com/1177872"
},
{
"category": "external",
"summary": "SUSE Bug 1178588 for CVE-2020-26950",
"url": "https://bugzilla.suse.com/1178588"
},
{
"category": "external",
"summary": "SUSE Bug 1178611 for CVE-2020-26950",
"url": "https://bugzilla.suse.com/1178611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26950"
},
{
"cve": "CVE-2020-26951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26951"
}
],
"notes": [
{
"category": "general",
"text": "A parsing and event loading mismatch in Firefox\u0027s SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26951",
"url": "https://www.suse.com/security/cve/CVE-2020-26951"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26951",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26951",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26951"
},
{
"cve": "CVE-2020-26953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26953"
}
],
"notes": [
{
"category": "general",
"text": "It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26953",
"url": "https://www.suse.com/security/cve/CVE-2020-26953"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26953",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26953",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26953"
},
{
"cve": "CVE-2020-26956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26956"
}
],
"notes": [
{
"category": "general",
"text": "In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26956",
"url": "https://www.suse.com/security/cve/CVE-2020-26956"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26956",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26956",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26956"
},
{
"cve": "CVE-2020-26958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26958"
}
],
"notes": [
{
"category": "general",
"text": "Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a cross-site script inclusion vulnerability, or a Content Security Policy bypass. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26958",
"url": "https://www.suse.com/security/cve/CVE-2020-26958"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26958",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26958",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26958"
},
{
"cve": "CVE-2020-26959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26959"
}
],
"notes": [
{
"category": "general",
"text": "During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26959",
"url": "https://www.suse.com/security/cve/CVE-2020-26959"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26959",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26959",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26959"
},
{
"cve": "CVE-2020-26960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26960"
}
],
"notes": [
{
"category": "general",
"text": "If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26960",
"url": "https://www.suse.com/security/cve/CVE-2020-26960"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26960",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26960",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26960"
},
{
"cve": "CVE-2020-26961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26961"
}
],
"notes": [
{
"category": "general",
"text": "When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver. However when an IPv4 address was mapped through IPv6, these addresses were erroneously let through, leading to a potential DNS Rebinding attack. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26961",
"url": "https://www.suse.com/security/cve/CVE-2020-26961"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26961",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26961",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26961"
},
{
"cve": "CVE-2020-26965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26965"
}
],
"notes": [
{
"category": "general",
"text": "Some websites have a feature \"Show Password\" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field was changed, resulting in a keyboard layout change and the possibility for the software keyboard to remember the typed password. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26965",
"url": "https://www.suse.com/security/cve/CVE-2020-26965"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26965",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26965",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26965"
},
{
"cve": "CVE-2020-26966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26966"
}
],
"notes": [
{
"category": "general",
"text": "Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26966",
"url": "https://www.suse.com/security/cve/CVE-2020-26966"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26966",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26966",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26966"
},
{
"cve": "CVE-2020-26968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26968"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 83, Firefox ESR \u003c 78.5, and Thunderbird \u003c 78.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26968",
"url": "https://www.suse.com/security/cve/CVE-2020-26968"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-26968",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-26968",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26968"
},
{
"cve": "CVE-2020-26970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26970"
}
],
"notes": [
{
"category": "general",
"text": "When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird \u003c 78.5.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26970",
"url": "https://www.suse.com/security/cve/CVE-2020-26970"
},
{
"category": "external",
"summary": "SUSE Bug 1179530 for CVE-2020-26970",
"url": "https://bugzilla.suse.com/1179530"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-26970"
},
{
"cve": "CVE-2020-26971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26971"
}
],
"notes": [
{
"category": "general",
"text": "Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Firefox \u003c 84, Thunderbird \u003c 78.6, and Firefox ESR \u003c 78.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26971",
"url": "https://www.suse.com/security/cve/CVE-2020-26971"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-26971",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26971"
},
{
"cve": "CVE-2020-26973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26973"
}
],
"notes": [
{
"category": "general",
"text": "Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass. This vulnerability affects Firefox \u003c 84, Thunderbird \u003c 78.6, and Firefox ESR \u003c 78.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26973",
"url": "https://www.suse.com/security/cve/CVE-2020-26973"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-26973",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26973"
},
{
"cve": "CVE-2020-26974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26974"
}
],
"notes": [
{
"category": "general",
"text": "When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type. This resulted in a heap user-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox \u003c 84, Thunderbird \u003c 78.6, and Firefox ESR \u003c 78.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26974",
"url": "https://www.suse.com/security/cve/CVE-2020-26974"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-26974",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26974"
},
{
"cve": "CVE-2020-26976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26976"
}
],
"notes": [
{
"category": "general",
"text": "When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox \u003c 84.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26976",
"url": "https://www.suse.com/security/cve/CVE-2020-26976"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-26976",
"url": "https://bugzilla.suse.com/1180039"
},
{
"category": "external",
"summary": "SUSE Bug 1181414 for CVE-2020-26976",
"url": "https://bugzilla.suse.com/1181414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26976"
},
{
"cve": "CVE-2020-26978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26978"
}
],
"notes": [
{
"category": "general",
"text": "Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network\u0027s hosts as well as services running on the user\u0027s local machine. This vulnerability affects Firefox \u003c 84, Thunderbird \u003c 78.6, and Firefox ESR \u003c 78.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26978",
"url": "https://www.suse.com/security/cve/CVE-2020-26978"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-26978",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-26978"
},
{
"cve": "CVE-2020-35111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35111"
}
],
"notes": [
{
"category": "general",
"text": "When an extension with the proxy permission registered to receive \u003call_urls\u003e, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox \u003c 84, Thunderbird \u003c 78.6, and Firefox ESR \u003c 78.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35111",
"url": "https://www.suse.com/security/cve/CVE-2020-35111"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-35111",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-35111"
},
{
"cve": "CVE-2020-35112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35112"
}
],
"notes": [
{
"category": "general",
"text": "If a user downloaded a file lacking an extension on Windows, and then \"Open\"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension (such as .bat or .exe) that executable would have been launched instead. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 84, Thunderbird \u003c 78.6, and Firefox ESR \u003c 78.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35112",
"url": "https://www.suse.com/security/cve/CVE-2020-35112"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-35112",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-35112"
},
{
"cve": "CVE-2020-35113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35113"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 84, Thunderbird \u003c 78.6, and Firefox ESR \u003c 78.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35113",
"url": "https://www.suse.com/security/cve/CVE-2020-35113"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-35113",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-35113"
},
{
"cve": "CVE-2020-6463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6463"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6463",
"url": "https://www.suse.com/security/cve/CVE-2020-6463"
},
{
"category": "external",
"summary": "SUSE Bug 1171975 for CVE-2020-6463",
"url": "https://bugzilla.suse.com/1171975"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-6463",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6463"
},
{
"cve": "CVE-2020-6514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6514"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6514",
"url": "https://www.suse.com/security/cve/CVE-2020-6514"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6514",
"url": "https://bugzilla.suse.com/1174189"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-6514",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6514"
},
{
"cve": "CVE-2020-6792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6792"
}
],
"notes": [
{
"category": "general",
"text": "When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird \u003c 68.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6792",
"url": "https://www.suse.com/security/cve/CVE-2020-6792"
},
{
"category": "external",
"summary": "SUSE Bug 1163368 for CVE-2020-6792",
"url": "https://bugzilla.suse.com/1163368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6792"
},
{
"cve": "CVE-2020-6793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6793"
}
],
"notes": [
{
"category": "general",
"text": "When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird \u003c 68.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6793",
"url": "https://www.suse.com/security/cve/CVE-2020-6793"
},
{
"category": "external",
"summary": "SUSE Bug 1163368 for CVE-2020-6793",
"url": "https://bugzilla.suse.com/1163368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6793"
},
{
"cve": "CVE-2020-6794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6794"
}
],
"notes": [
{
"category": "general",
"text": "If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Thunderbird \u003c 68.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6794",
"url": "https://www.suse.com/security/cve/CVE-2020-6794"
},
{
"category": "external",
"summary": "SUSE Bug 1163368 for CVE-2020-6794",
"url": "https://bugzilla.suse.com/1163368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6794"
},
{
"cve": "CVE-2020-6795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6795"
}
],
"notes": [
{
"category": "general",
"text": "When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird \u003c 68.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6795",
"url": "https://www.suse.com/security/cve/CVE-2020-6795"
},
{
"category": "external",
"summary": "SUSE Bug 1163368 for CVE-2020-6795",
"url": "https://bugzilla.suse.com/1163368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6795"
},
{
"cve": "CVE-2020-6797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6797"
}
],
"notes": [
{
"category": "general",
"text": "By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user\u0027s computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact. Note: this issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird \u003c 68.5, Firefox \u003c 73, and Firefox \u003c ESR68.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6797",
"url": "https://www.suse.com/security/cve/CVE-2020-6797"
},
{
"category": "external",
"summary": "SUSE Bug 1163368 for CVE-2020-6797",
"url": "https://bugzilla.suse.com/1163368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6797"
},
{
"cve": "CVE-2020-6798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6798"
}
],
"notes": [
{
"category": "general",
"text": "If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird \u003c 68.5, Firefox \u003c 73, and Firefox \u003c ESR68.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6798",
"url": "https://www.suse.com/security/cve/CVE-2020-6798"
},
{
"category": "external",
"summary": "SUSE Bug 1163368 for CVE-2020-6798",
"url": "https://bugzilla.suse.com/1163368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6798"
},
{
"cve": "CVE-2020-6800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. This vulnerability affects Thunderbird \u003c 68.5, Firefox \u003c 73, and Firefox \u003c ESR68.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6800",
"url": "https://www.suse.com/security/cve/CVE-2020-6800"
},
{
"category": "external",
"summary": "SUSE Bug 1163368 for CVE-2020-6800",
"url": "https://bugzilla.suse.com/1163368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6800"
},
{
"cve": "CVE-2020-6805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6805"
}
],
"notes": [
{
"category": "general",
"text": "When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.6, Firefox \u003c 74, Firefox \u003c ESR68.6, and Firefox ESR \u003c 68.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6805",
"url": "https://www.suse.com/security/cve/CVE-2020-6805"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2020-6805",
"url": "https://bugzilla.suse.com/1166238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6805"
},
{
"cve": "CVE-2020-6806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6806"
}
],
"notes": [
{
"category": "general",
"text": "By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.6, Firefox \u003c 74, Firefox \u003c ESR68.6, and Firefox ESR \u003c 68.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6806",
"url": "https://www.suse.com/security/cve/CVE-2020-6806"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2020-6806",
"url": "https://bugzilla.suse.com/1166238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6806"
},
{
"cve": "CVE-2020-6807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6807"
}
],
"notes": [
{
"category": "general",
"text": "When a device was changed while a stream was about to be destroyed, the \u003ccode\u003estream-reinit\u003c/code\u003e task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 68.6, Firefox \u003c 74, Firefox \u003c ESR68.6, and Firefox ESR \u003c 68.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6807",
"url": "https://www.suse.com/security/cve/CVE-2020-6807"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2020-6807",
"url": "https://bugzilla.suse.com/1166238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6807"
},
{
"cve": "CVE-2020-6811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6811"
}
],
"notes": [
{
"category": "general",
"text": "The \u0027Copy as cURL\u0027 feature of Devtools\u0027 network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the \u0027Copy as Curl\u0027 feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird \u003c 68.6, Firefox \u003c 74, Firefox \u003c ESR68.6, and Firefox ESR \u003c 68.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6811",
"url": "https://www.suse.com/security/cve/CVE-2020-6811"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2020-6811",
"url": "https://bugzilla.suse.com/1166238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6811"
},
{
"cve": "CVE-2020-6812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6812"
}
],
"notes": [
{
"category": "general",
"text": "The first time AirPods are connected to an iPhone, they become named after the user\u0027s name by default (e.g. Jane Doe\u0027s AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user\u0027s name. To resolve this issue, Firefox added a special case that renames devices containing the substring \u0027AirPods\u0027 to simply \u0027AirPods\u0027. This vulnerability affects Thunderbird \u003c 68.6, Firefox \u003c 74, Firefox \u003c ESR68.6, and Firefox ESR \u003c 68.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6812",
"url": "https://www.suse.com/security/cve/CVE-2020-6812"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2020-6812",
"url": "https://bugzilla.suse.com/1166238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6812"
},
{
"cve": "CVE-2020-6814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6814"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 68.6, Firefox \u003c 74, Firefox \u003c ESR68.6, and Firefox ESR \u003c 68.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6814",
"url": "https://www.suse.com/security/cve/CVE-2020-6814"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2020-6814",
"url": "https://bugzilla.suse.com/1166238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6814"
},
{
"cve": "CVE-2020-6819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6819"
}
],
"notes": [
{
"category": "general",
"text": "Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird \u003c 68.7.0, Firefox \u003c 74.0.1, and Firefox ESR \u003c 68.6.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6819",
"url": "https://www.suse.com/security/cve/CVE-2020-6819"
},
{
"category": "external",
"summary": "SUSE Bug 1168630 for CVE-2020-6819",
"url": "https://bugzilla.suse.com/1168630"
},
{
"category": "external",
"summary": "SUSE Bug 1168874 for CVE-2020-6819",
"url": "https://bugzilla.suse.com/1168874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6819"
},
{
"cve": "CVE-2020-6820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6820"
}
],
"notes": [
{
"category": "general",
"text": "Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird \u003c 68.7.0, Firefox \u003c 74.0.1, and Firefox ESR \u003c 68.6.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6820",
"url": "https://www.suse.com/security/cve/CVE-2020-6820"
},
{
"category": "external",
"summary": "SUSE Bug 1168630 for CVE-2020-6820",
"url": "https://bugzilla.suse.com/1168630"
},
{
"category": "external",
"summary": "SUSE Bug 1168874 for CVE-2020-6820",
"url": "https://bugzilla.suse.com/1168874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6820"
},
{
"cve": "CVE-2020-6821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6821"
}
],
"notes": [
{
"category": "general",
"text": "When reading from areas partially or fully outside the source resource with WebGL\u0027s \u003ccode\u003ecopyTexSubImage\u003c/code\u003e method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird \u003c 68.7.0, Firefox ESR \u003c 68.7, and Firefox \u003c 75.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6821",
"url": "https://www.suse.com/security/cve/CVE-2020-6821"
},
{
"category": "external",
"summary": "SUSE Bug 1168630 for CVE-2020-6821",
"url": "https://bugzilla.suse.com/1168630"
},
{
"category": "external",
"summary": "SUSE Bug 1168874 for CVE-2020-6821",
"url": "https://bugzilla.suse.com/1168874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6821"
},
{
"cve": "CVE-2020-6822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6822"
}
],
"notes": [
{
"category": "general",
"text": "On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in \u003ccode\u003eGMPDecodeData\u003c/code\u003e. It is possible that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 68.7.0, Firefox ESR \u003c 68.7, and Firefox \u003c 75.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6822",
"url": "https://www.suse.com/security/cve/CVE-2020-6822"
},
{
"category": "external",
"summary": "SUSE Bug 1168630 for CVE-2020-6822",
"url": "https://bugzilla.suse.com/1168630"
},
{
"category": "external",
"summary": "SUSE Bug 1168874 for CVE-2020-6822",
"url": "https://bugzilla.suse.com/1168874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6822"
},
{
"cve": "CVE-2020-6825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6825"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 68.7.0, Firefox ESR \u003c 68.7, and Firefox \u003c 75.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6825",
"url": "https://www.suse.com/security/cve/CVE-2020-6825"
},
{
"category": "external",
"summary": "SUSE Bug 1168630 for CVE-2020-6825",
"url": "https://bugzilla.suse.com/1168630"
},
{
"category": "external",
"summary": "SUSE Bug 1168874 for CVE-2020-6825",
"url": "https://bugzilla.suse.com/1168874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6825"
},
{
"cve": "CVE-2020-6831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6831"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 68.8, Firefox \u003c 76, and Thunderbird \u003c 68.8.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6831",
"url": "https://www.suse.com/security/cve/CVE-2020-6831"
},
{
"category": "external",
"summary": "SUSE Bug 1171186 for CVE-2020-6831",
"url": "https://bugzilla.suse.com/1171186"
},
{
"category": "external",
"summary": "SUSE Bug 1171247 for CVE-2020-6831",
"url": "https://bugzilla.suse.com/1171247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6831"
},
{
"cve": "CVE-2021-23953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23953"
}
],
"notes": [
{
"category": "general",
"text": "If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects Firefox \u003c 85, Thunderbird \u003c 78.7, and Firefox ESR \u003c 78.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23953",
"url": "https://www.suse.com/security/cve/CVE-2021-23953"
},
{
"category": "external",
"summary": "SUSE Bug 1181414 for CVE-2021-23953",
"url": "https://bugzilla.suse.com/1181414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23953"
},
{
"cve": "CVE-2021-23954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23954"
}
],
"notes": [
{
"category": "general",
"text": "Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability affects Firefox \u003c 85, Thunderbird \u003c 78.7, and Firefox ESR \u003c 78.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23954",
"url": "https://www.suse.com/security/cve/CVE-2021-23954"
},
{
"category": "external",
"summary": "SUSE Bug 1181414 for CVE-2021-23954",
"url": "https://bugzilla.suse.com/1181414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23954"
},
{
"cve": "CVE-2021-23960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23960"
}
],
"notes": [
{
"category": "general",
"text": "Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerability affects Firefox \u003c 85, Thunderbird \u003c 78.7, and Firefox ESR \u003c 78.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23960",
"url": "https://www.suse.com/security/cve/CVE-2021-23960"
},
{
"category": "external",
"summary": "SUSE Bug 1181414 for CVE-2021-23960",
"url": "https://bugzilla.suse.com/1181414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23960"
},
{
"cve": "CVE-2021-23961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23961"
}
],
"notes": [
{
"category": "general",
"text": "Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network\u0027s hosts as well as services running on the user\u0027s local machine. This vulnerability affects Firefox \u003c 85.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23961",
"url": "https://www.suse.com/security/cve/CVE-2021-23961"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-23961",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23961"
},
{
"cve": "CVE-2021-23964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23964"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 85, Thunderbird \u003c 78.7, and Firefox ESR \u003c 78.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23964",
"url": "https://www.suse.com/security/cve/CVE-2021-23964"
},
{
"category": "external",
"summary": "SUSE Bug 1181414 for CVE-2021-23964",
"url": "https://bugzilla.suse.com/1181414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23964"
},
{
"cve": "CVE-2021-23968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23968"
}
],
"notes": [
{
"category": "general",
"text": "If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox \u003c 86, Thunderbird \u003c 78.8, and Firefox ESR \u003c 78.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23968",
"url": "https://www.suse.com/security/cve/CVE-2021-23968"
},
{
"category": "external",
"summary": "SUSE Bug 1182614 for CVE-2021-23968",
"url": "https://bugzilla.suse.com/1182614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23968"
},
{
"cve": "CVE-2021-23969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23969"
}
],
"notes": [
{
"category": "general",
"text": "As specified in the W3C Content Security Policy draft, when creating a violation report, \"User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that\u0027s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage.\" Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination\u0027s origin. This vulnerability affects Firefox \u003c 86, Thunderbird \u003c 78.8, and Firefox ESR \u003c 78.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23969",
"url": "https://www.suse.com/security/cve/CVE-2021-23969"
},
{
"category": "external",
"summary": "SUSE Bug 1182614 for CVE-2021-23969",
"url": "https://bugzilla.suse.com/1182614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23969"
},
{
"cve": "CVE-2021-23973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23973"
}
],
"notes": [
{
"category": "general",
"text": "When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox \u003c 86, Thunderbird \u003c 78.8, and Firefox ESR \u003c 78.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23973",
"url": "https://www.suse.com/security/cve/CVE-2021-23973"
},
{
"category": "external",
"summary": "SUSE Bug 1182614 for CVE-2021-23973",
"url": "https://bugzilla.suse.com/1182614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23973"
},
{
"cve": "CVE-2021-23978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23978"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 86, Thunderbird \u003c 78.8, and Firefox ESR \u003c 78.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23978",
"url": "https://www.suse.com/security/cve/CVE-2021-23978"
},
{
"category": "external",
"summary": "SUSE Bug 1182614 for CVE-2021-23978",
"url": "https://bugzilla.suse.com/1182614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23978"
},
{
"cve": "CVE-2021-23981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23981"
}
],
"notes": [
{
"category": "general",
"text": "A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR \u003c 78.9, Firefox \u003c 87, and Thunderbird \u003c 78.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23981",
"url": "https://www.suse.com/security/cve/CVE-2021-23981"
},
{
"category": "external",
"summary": "SUSE Bug 1183942 for CVE-2021-23981",
"url": "https://bugzilla.suse.com/1183942"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23981"
},
{
"cve": "CVE-2021-23982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23982"
}
],
"notes": [
{
"category": "general",
"text": "Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network\u0027s hosts as well as services running on the user\u0027s local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR \u003c 78.9, Firefox \u003c 87, and Thunderbird \u003c 78.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23982",
"url": "https://www.suse.com/security/cve/CVE-2021-23982"
},
{
"category": "external",
"summary": "SUSE Bug 1183942 for CVE-2021-23982",
"url": "https://bugzilla.suse.com/1183942"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23982"
},
{
"cve": "CVE-2021-23984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23984"
}
],
"notes": [
{
"category": "general",
"text": "A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR \u003c 78.9, Firefox \u003c 87, and Thunderbird \u003c 78.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23984",
"url": "https://www.suse.com/security/cve/CVE-2021-23984"
},
{
"category": "external",
"summary": "SUSE Bug 1183942 for CVE-2021-23984",
"url": "https://bugzilla.suse.com/1183942"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23984"
},
{
"cve": "CVE-2021-23987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23987"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 78.9, Firefox \u003c 87, and Thunderbird \u003c 78.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23987",
"url": "https://www.suse.com/security/cve/CVE-2021-23987"
},
{
"category": "external",
"summary": "SUSE Bug 1183942 for CVE-2021-23987",
"url": "https://bugzilla.suse.com/1183942"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23987"
},
{
"cve": "CVE-2021-23991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23991"
}
],
"notes": [
{
"category": "general",
"text": "If a Thunderbird user has previously imported Alice\u0027s OpenPGP key, and Alice has extended the validity period of her key, but Alice\u0027s updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice\u0027s key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird \u003c 78.9.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23991",
"url": "https://www.suse.com/security/cve/CVE-2021-23991"
},
{
"category": "external",
"summary": "SUSE Bug 1184536 for CVE-2021-23991",
"url": "https://bugzilla.suse.com/1184536"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-23991"
},
{
"cve": "CVE-2021-23993",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23993"
}
],
"notes": [
{
"category": "general",
"text": "An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird \u003c 78.9.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23993",
"url": "https://www.suse.com/security/cve/CVE-2021-23993"
},
{
"category": "external",
"summary": "SUSE Bug 1184536 for CVE-2021-23993",
"url": "https://bugzilla.suse.com/1184536"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-23993"
},
{
"cve": "CVE-2021-23994",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23994"
}
],
"notes": [
{
"category": "general",
"text": "A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR \u003c 78.10, Thunderbird \u003c 78.10, and Firefox \u003c 88.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23994",
"url": "https://www.suse.com/security/cve/CVE-2021-23994"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-23994",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23994"
},
{
"cve": "CVE-2021-23995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23995"
}
],
"notes": [
{
"category": "general",
"text": "When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 78.10, Thunderbird \u003c 78.10, and Firefox \u003c 88.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23995",
"url": "https://www.suse.com/security/cve/CVE-2021-23995"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-23995",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23995"
},
{
"cve": "CVE-2021-23998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23998"
}
],
"notes": [
{
"category": "general",
"text": "Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox ESR \u003c 78.10, Thunderbird \u003c 78.10, and Firefox \u003c 88.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23998",
"url": "https://www.suse.com/security/cve/CVE-2021-23998"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-23998",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23998"
},
{
"cve": "CVE-2021-23999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23999"
}
],
"notes": [
{
"category": "general",
"text": "If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR \u003c 78.10, Thunderbird \u003c 78.10, and Firefox \u003c 88.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23999",
"url": "https://www.suse.com/security/cve/CVE-2021-23999"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-23999",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23999"
},
{
"cve": "CVE-2021-24002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-24002"
}
],
"notes": [
{
"category": "general",
"text": "When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR \u003c 78.10, Thunderbird \u003c 78.10, and Firefox \u003c 88.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-24002",
"url": "https://www.suse.com/security/cve/CVE-2021-24002"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-24002",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-24002"
},
{
"cve": "CVE-2021-29945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29945"
}
],
"notes": [
{
"category": "general",
"text": "The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32 platforms. Other platforms are unaffected.*. This vulnerability affects Firefox ESR \u003c 78.10, Thunderbird \u003c 78.10, and Firefox \u003c 88.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29945",
"url": "https://www.suse.com/security/cve/CVE-2021-29945"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-29945",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29945"
},
{
"cve": "CVE-2021-29946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29946"
}
],
"notes": [
{
"category": "general",
"text": "Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header. This vulnerability affects Firefox ESR \u003c 78.10, Thunderbird \u003c 78.10, and Firefox \u003c 88.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29946",
"url": "https://www.suse.com/security/cve/CVE-2021-29946"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-29946",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29946"
},
{
"cve": "CVE-2021-29948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29948"
}
],
"notes": [
{
"category": "general",
"text": "Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replacing the file. This vulnerability affects Thunderbird \u003c 78.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29948",
"url": "https://www.suse.com/security/cve/CVE-2021-29948"
},
{
"category": "external",
"summary": "SUSE Bug 1184960 for CVE-2021-29948",
"url": "https://bugzilla.suse.com/1184960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29948"
},
{
"cve": "CVE-2021-29956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29956"
}
],
"notes": [
{
"category": "general",
"text": "OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user\u0027s local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automatically protect keys that had been imported using affected Thunderbird versions. This vulnerability affects Thunderbird \u003c 78.10.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29956",
"url": "https://www.suse.com/security/cve/CVE-2021-29956"
},
{
"category": "external",
"summary": "SUSE Bug 1186199 for CVE-2021-29956",
"url": "https://bugzilla.suse.com/1186199"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-29956"
},
{
"cve": "CVE-2021-29957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29957"
}
],
"notes": [
{
"category": "general",
"text": "If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird \u003c 78.10.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29957",
"url": "https://www.suse.com/security/cve/CVE-2021-29957"
},
{
"category": "external",
"summary": "SUSE Bug 1186198 for CVE-2021-29957",
"url": "https://bugzilla.suse.com/1186198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-29957"
},
{
"cve": "CVE-2021-29964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29964"
}
],
"notes": [
{
"category": "general",
"text": "A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 78.11, Firefox \u003c 89, and Firefox ESR \u003c 78.11.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29964",
"url": "https://www.suse.com/security/cve/CVE-2021-29964"
},
{
"category": "external",
"summary": "SUSE Bug 1186696 for CVE-2021-29964",
"url": "https://bugzilla.suse.com/1186696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29964"
},
{
"cve": "CVE-2021-29967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29967"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 78.11, Firefox \u003c 89, and Firefox ESR \u003c 78.11.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29967",
"url": "https://www.suse.com/security/cve/CVE-2021-29967"
},
{
"category": "external",
"summary": "SUSE Bug 1186696 for CVE-2021-29967",
"url": "https://bugzilla.suse.com/1186696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29967"
},
{
"cve": "CVE-2021-29969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29969"
}
],
"notes": [
{
"category": "general",
"text": "If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS handshake, then Thunderbird didn\u0027t ignore the injected data. This could have resulted in Thunderbird showing incorrect information, for example the attacker could have tricked Thunderbird to show folders that didn\u0027t exist on the IMAP server. This vulnerability affects Thunderbird \u003c 78.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29969",
"url": "https://www.suse.com/security/cve/CVE-2021-29969"
},
{
"category": "external",
"summary": "SUSE Bug 1188275 for CVE-2021-29969",
"url": "https://bugzilla.suse.com/1188275"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29969"
},
{
"cve": "CVE-2021-29970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29970"
}
],
"notes": [
{
"category": "general",
"text": "A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability affects Thunderbird \u003c 78.12, Firefox ESR \u003c 78.12, and Firefox \u003c 90.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29970",
"url": "https://www.suse.com/security/cve/CVE-2021-29970"
},
{
"category": "external",
"summary": "SUSE Bug 1188275 for CVE-2021-29970",
"url": "https://bugzilla.suse.com/1188275"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29970"
},
{
"cve": "CVE-2021-29976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29976"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 78.12, Firefox ESR \u003c 78.12, and Firefox \u003c 90.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29976",
"url": "https://www.suse.com/security/cve/CVE-2021-29976"
},
{
"category": "external",
"summary": "SUSE Bug 1188275 for CVE-2021-29976",
"url": "https://bugzilla.suse.com/1188275"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29976"
},
{
"cve": "CVE-2021-29980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29980"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 78.13, Thunderbird \u003c 91, Firefox ESR \u003c 78.13, and Firefox \u003c 91.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29980",
"url": "https://www.suse.com/security/cve/CVE-2021-29980"
},
{
"category": "external",
"summary": "SUSE Bug 1188891 for CVE-2021-29980",
"url": "https://bugzilla.suse.com/1188891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29980"
},
{
"cve": "CVE-2021-29984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29984"
}
],
"notes": [
{
"category": "general",
"text": "Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 78.13, Thunderbird \u003c 91, Firefox ESR \u003c 78.13, and Firefox \u003c 91.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29984",
"url": "https://www.suse.com/security/cve/CVE-2021-29984"
},
{
"category": "external",
"summary": "SUSE Bug 1188891 for CVE-2021-29984",
"url": "https://bugzilla.suse.com/1188891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29984"
},
{
"cve": "CVE-2021-29985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29985"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 78.13, Thunderbird \u003c 91, Firefox ESR \u003c 78.13, and Firefox \u003c 91.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29985",
"url": "https://www.suse.com/security/cve/CVE-2021-29985"
},
{
"category": "external",
"summary": "SUSE Bug 1188891 for CVE-2021-29985",
"url": "https://bugzilla.suse.com/1188891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29985"
},
{
"cve": "CVE-2021-29986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29986"
}
],
"notes": [
{
"category": "general",
"text": "A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Linux operating systems. Other operating systems are unaffected.* This vulnerability affects Thunderbird \u003c 78.13, Thunderbird \u003c 91, Firefox ESR \u003c 78.13, and Firefox \u003c 91.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29986",
"url": "https://www.suse.com/security/cve/CVE-2021-29986"
},
{
"category": "external",
"summary": "SUSE Bug 1188891 for CVE-2021-29986",
"url": "https://bugzilla.suse.com/1188891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29986"
},
{
"cve": "CVE-2021-29988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29988"
}
],
"notes": [
{
"category": "general",
"text": "Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 78.13, Thunderbird \u003c 91, Firefox ESR \u003c 78.13, and Firefox \u003c 91.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29988",
"url": "https://www.suse.com/security/cve/CVE-2021-29988"
},
{
"category": "external",
"summary": "SUSE Bug 1188891 for CVE-2021-29988",
"url": "https://bugzilla.suse.com/1188891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29988"
},
{
"cve": "CVE-2021-29989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29989"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 78.13, Firefox ESR \u003c 78.13, and Firefox \u003c 91.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29989",
"url": "https://www.suse.com/security/cve/CVE-2021-29989"
},
{
"category": "external",
"summary": "SUSE Bug 1188891 for CVE-2021-29989",
"url": "https://bugzilla.suse.com/1188891"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29989"
},
{
"cve": "CVE-2021-29991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-29991"
}
],
"notes": [
{
"category": "general",
"text": "Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting attack against servers using HTTP/3. This vulnerability affects Firefox \u003c 91.0.1 and Thunderbird \u003c 91.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-29991",
"url": "https://www.suse.com/security/cve/CVE-2021-29991"
},
{
"category": "external",
"summary": "SUSE Bug 1189547 for CVE-2021-29991",
"url": "https://bugzilla.suse.com/1189547"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-29991"
},
{
"cve": "CVE-2021-30547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30547"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30547",
"url": "https://www.suse.com/security/cve/CVE-2021-30547"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30547",
"url": "https://bugzilla.suse.com/1187141"
},
{
"category": "external",
"summary": "SUSE Bug 1188275 for CVE-2021-30547",
"url": "https://bugzilla.suse.com/1188275"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30547"
},
{
"cve": "CVE-2021-38492",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38492"
}
],
"notes": [
{
"category": "general",
"text": "When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. *This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003c 92, Thunderbird \u003c 91.1, Thunderbird \u003c 78.14, Firefox ESR \u003c 78.14, and Firefox ESR \u003c 91.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38492",
"url": "https://www.suse.com/security/cve/CVE-2021-38492"
},
{
"category": "external",
"summary": "SUSE Bug 1190269 for CVE-2021-38492",
"url": "https://bugzilla.suse.com/1190269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-38492"
},
{
"cve": "CVE-2021-38495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-38495"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 91.1 and Firefox ESR \u003c 91.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-38495",
"url": "https://www.suse.com/security/cve/CVE-2021-38495"
},
{
"category": "external",
"summary": "SUSE Bug 1190269 for CVE-2021-38495",
"url": "https://bugzilla.suse.com/1190269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-91.1.1-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-91.1.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-38495"
}
]
}
opensuse-su-2019:1062-1
Vulnerability from csaf_opensuse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium to version 73.0.3683.75 fixes the following issues:\n\nSecurity issues fixed (bsc#1129059): \n\n- CVE-2019-5787: Fixed a use after free in Canvas.\n- CVE-2019-5788: Fixed a use after free in FileAPI.\n- CVE-2019-5789: Fixed a use after free in WebMIDI.\n- CVE-2019-5790: Fixed a heap buffer overflow in V8.\n- CVE-2019-5791: Fixed a type confusion in V8.\n- CVE-2019-5792: Fixed an integer overflow in PDFium.\n- CVE-2019-5793: Fixed excessive permissions for private API in Extensions.\n- CVE-2019-5794: Fixed security UI spoofing.\n- CVE-2019-5795: Fixed an integer overflow in PDFium.\n- CVE-2019-5796: Fixed a race condition in Extensions.\n- CVE-2019-5797: Fixed a race condition in DOMStorage.\n- CVE-2019-5798: Fixed an out of bounds read in Skia.\n- CVE-2019-5799: Fixed a CSP bypass with blob URL.\n- CVE-2019-5800: Fixed a CSP bypass with blob URL.\n- CVE-2019-5801: Fixed an incorrect Omnibox display on iOS.\n- CVE-2019-5802: Fixed security UI spoofing.\n- CVE-2019-5803: Fixed a CSP bypass with Javascript URLs\u0027.\n- CVE-2019-5804: Fixed a command line injection on Windows.\n\nRelease notes: https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1062",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1062-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1062-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UEJ3CRVCTM23JSBBSLBH5OMPDHJF2SQK/#UEJ3CRVCTM23JSBBSLBH5OMPDHJF2SQK"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1062-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UEJ3CRVCTM23JSBBSLBH5OMPDHJF2SQK/#UEJ3CRVCTM23JSBBSLBH5OMPDHJF2SQK"
},
{
"category": "self",
"summary": "SUSE Bug 1129059",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5787 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5788 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5789 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5790 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5791 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5792 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5793 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5794 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5795 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5796 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5799 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5801 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5802 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5803 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5804 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5804/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2019-03-28T05:34:45Z",
"generator": {
"date": "2019-03-28T05:34:45Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1062-1",
"initial_release_date": "2019-03-28T05:34:45Z",
"revision_history": [
{
"date": "2019-03-28T05:34:45Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"product": {
"name": "chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"product_id": "chromedriver-73.0.3683.75-lp150.206.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-73.0.3683.75-lp150.206.1.x86_64",
"product": {
"name": "chromium-73.0.3683.75-lp150.206.1.x86_64",
"product_id": "chromium-73.0.3683.75-lp150.206.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.0",
"product": {
"name": "openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-73.0.3683.75-lp150.206.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64"
},
"product_reference": "chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-73.0.3683.75-lp150.206.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
},
"product_reference": "chromium-73.0.3683.75-lp150.206.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5787"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5787",
"url": "https://www.suse.com/security/cve/CVE-2019-5787"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5787",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "critical"
}
],
"title": "CVE-2019-5787"
},
{
"cve": "CVE-2019-5788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5788"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5788",
"url": "https://www.suse.com/security/cve/CVE-2019-5788"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5788",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "critical"
}
],
"title": "CVE-2019-5788"
},
{
"cve": "CVE-2019-5789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5789"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5789",
"url": "https://www.suse.com/security/cve/CVE-2019-5789"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5789",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "critical"
}
],
"title": "CVE-2019-5789"
},
{
"cve": "CVE-2019-5790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5790"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5790",
"url": "https://www.suse.com/security/cve/CVE-2019-5790"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5790",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "important"
}
],
"title": "CVE-2019-5790"
},
{
"cve": "CVE-2019-5791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5791"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5791",
"url": "https://www.suse.com/security/cve/CVE-2019-5791"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5791",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "important"
}
],
"title": "CVE-2019-5791"
},
{
"cve": "CVE-2019-5792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5792"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5792",
"url": "https://www.suse.com/security/cve/CVE-2019-5792"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5792",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "important"
}
],
"title": "CVE-2019-5792"
},
{
"cve": "CVE-2019-5793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5793"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5793",
"url": "https://www.suse.com/security/cve/CVE-2019-5793"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5793",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5793"
},
{
"cve": "CVE-2019-5794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5794"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5794",
"url": "https://www.suse.com/security/cve/CVE-2019-5794"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5794",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5794"
},
{
"cve": "CVE-2019-5795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5795"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5795",
"url": "https://www.suse.com/security/cve/CVE-2019-5795"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5795",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "important"
}
],
"title": "CVE-2019-5795"
},
{
"cve": "CVE-2019-5796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5796"
}
],
"notes": [
{
"category": "general",
"text": "Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5796",
"url": "https://www.suse.com/security/cve/CVE-2019-5796"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5796",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "important"
}
],
"title": "CVE-2019-5796"
},
{
"cve": "CVE-2019-5797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5797"
}
],
"notes": [
{
"category": "general",
"text": "Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5797",
"url": "https://www.suse.com/security/cve/CVE-2019-5797"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5797",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "important"
}
],
"title": "CVE-2019-5797"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-5799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5799"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect inheritance of a new document\u0027s policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5799",
"url": "https://www.suse.com/security/cve/CVE-2019-5799"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5799",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5799"
},
{
"cve": "CVE-2019-5800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5800"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5800",
"url": "https://www.suse.com/security/cve/CVE-2019-5800"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5800",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5800"
},
{
"cve": "CVE-2019-5801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5801"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5801",
"url": "https://www.suse.com/security/cve/CVE-2019-5801"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5801",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5801"
},
{
"cve": "CVE-2019-5802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5802"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5802",
"url": "https://www.suse.com/security/cve/CVE-2019-5802"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5802",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5802"
},
{
"cve": "CVE-2019-5803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5803"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5803",
"url": "https://www.suse.com/security/cve/CVE-2019-5803"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5803",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5803"
},
{
"cve": "CVE-2019-5804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5804"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5804",
"url": "https://www.suse.com/security/cve/CVE-2019-5804"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5804",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.0:chromedriver-73.0.3683.75-lp150.206.1.x86_64",
"openSUSE Leap 15.0:chromium-73.0.3683.75-lp150.206.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-03-28T05:34:45Z",
"details": "moderate"
}
],
"title": "CVE-2019-5804"
}
]
}
opensuse-su-2019:1666-1
Vulnerability from csaf_opensuse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium fixes the following issues:\n\nChromium was updated to 75.0.3770.90 (boo#1137332 boo#1138287):\n\n* CVE-2019-5842: Use-after-free in Blink.\n\n\nAlso updated to 75.0.3770.80 boo#1137332:\n\n* CVE-2019-5828: Use after free in ServiceWorker\n* CVE-2019-5829: Use after free in Download Manager\n* CVE-2019-5830: Incorrectly credentialed requests in CORS\n* CVE-2019-5831: Incorrect map processing in V8\n* CVE-2019-5832: Incorrect CORS handling in XHR\n* CVE-2019-5833: Inconsistent security UI placemen\n* CVE-2019-5835: Out of bounds read in Swiftshader\n* CVE-2019-5836: Heap buffer overflow in Angle\n* CVE-2019-5837: Cross-origin resources size disclosure in Appcache\n* CVE-2019-5838: Overly permissive tab access in Extensions\n* CVE-2019-5839: Incorrect handling of certain code points in Blink\n* CVE-2019-5840: Popup blocker bypass\n* Various fixes from internal audits, fuzzing and other initiatives\n* CVE-2019-5834: URL spoof in Omnibox on iOS\n\nUpdate to 74.0.3729.169:\n\n* Feature fixes update only\n\nUpdate to 74.0.3729.157:\n\n* Various security fixes from internal audits, fuzzing and other\ninitiatives\n\nIncludes security fixes from 74.0.3729.131 (boo#1134218):\n\n* CVE-2019-5827: Out-of-bounds access in SQLite\n* CVE-2019-5824: Parameter passing error in media player\n\nUpdate to 74.0.3729.108 boo#1133313:\n\n* CVE-2019-5805: Use after free in PDFium\n* CVE-2019-5806: Integer overflow in Angle\n* CVE-2019-5807: Memory corruption in V8\n* CVE-2019-5808: Use after free in Blink\n* CVE-2019-5809: Use after free in Blink\n* CVE-2019-5810: User information disclosure in Autofill\n* CVE-2019-5811: CORS bypass in Blink\n* CVE-2019-5813: Out of bounds read in V8\n* CVE-2019-5814: CORS bypass in Blink\n* CVE-2019-5815: Heap buffer overflow in Blink\n* CVE-2019-5818: Uninitialized value in media reader\n* CVE-2019-5819: Incorrect escaping in developer tools\n* CVE-2019-5820: Integer overflow in PDFium\n* CVE-2019-5821: Integer overflow in PDFium\n* CVE-2019-5822: CORS bypass in download manager\n* CVE-2019-5823: Forced navigation from service worker\n* CVE-2019-5812: URL spoof in Omnibox on iOS\n* CVE-2019-5816: Exploit persistence extension on Android\n* CVE-2019-5817: Heap buffer overflow in Angle on Windows\n\nUpdate to 73.0.3686.103:\n* Various feature fixes\n\nUpdate to 73.0.3683.86:\n\n* Just feature fixes around\n\n- Update conditions to use system harfbuzz on TW+\n- Require java during build\n- Enable using pipewire when available\n- Rebase chromium-vaapi.patch to match up the Fedora one\n\nUpdate to 73.0.3683.75 boo#1129059:\n\n* CVE-2019-5787: Use after free in Canvas.\n* CVE-2019-5788: Use after free in FileAPI.\n* CVE-2019-5789: Use after free in WebMIDI.\n* CVE-2019-5790: Heap buffer overflow in V8.\n* CVE-2019-5791: Type confusion in V8.\n* CVE-2019-5792: Integer overflow in PDFium.\n* CVE-2019-5793: Excessive permissions for private API in Extensions.\n* CVE-2019-5794: Security UI spoofing.\n* CVE-2019-5795: Integer overflow in PDFium.\n* CVE-2019-5796: Race condition in Extensions.\n* CVE-2019-5797: Race condition in DOMStorage.\n* CVE-2019-5798: Out of bounds read in Skia.\n* CVE-2019-5799: CSP bypass with blob URL.\n* CVE-2019-5800: CSP bypass with blob URL.\n* CVE-2019-5801: Incorrect Omnibox display on iOS.\n* CVE-2019-5802: Security UI spoofing.\n* CVE-2019-5803: CSP bypass with Javascript URLs\u0027.\n* CVE-2019-5804: Command line command injection on Windows.\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1666",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1666-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1666-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5VVYZ3GC3OTOPB2PPY5NYCHCFEYLSYXV/#5VVYZ3GC3OTOPB2PPY5NYCHCFEYLSYXV"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1666-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5VVYZ3GC3OTOPB2PPY5NYCHCFEYLSYXV/#5VVYZ3GC3OTOPB2PPY5NYCHCFEYLSYXV"
},
{
"category": "self",
"summary": "SUSE Bug 1129059",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "self",
"summary": "SUSE Bug 1133313",
"url": "https://bugzilla.suse.com/1133313"
},
{
"category": "self",
"summary": "SUSE Bug 1134218",
"url": "https://bugzilla.suse.com/1134218"
},
{
"category": "self",
"summary": "SUSE Bug 1137332",
"url": "https://bugzilla.suse.com/1137332"
},
{
"category": "self",
"summary": "SUSE Bug 1138287",
"url": "https://bugzilla.suse.com/1138287"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5787 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5788 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5789 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5790 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5791 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5792 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5793 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5794 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5795 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5796 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5799 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5801 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5802 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5803 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5804 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5805 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5806 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5807 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5808 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5809 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5810 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5811 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5812 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5813 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5814 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5822 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5823 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5824 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5827 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5828 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5829 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5830 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5831 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5832 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5833 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5834 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5835 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5836 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5837 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5837/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5838 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5839 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5840 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5842/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2019-06-28T12:43:15Z",
"generator": {
"date": "2019-06-28T12:43:15Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1666-1",
"initial_release_date": "2019-06-28T12:43:15Z",
"revision_history": [
{
"date": "2019-06-28T12:43:15Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"product": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"product_id": "chromedriver-75.0.3770.90-bp150.213.3.aarch64"
}
},
{
"category": "product_version",
"name": "chromium-75.0.3770.90-bp150.213.3.aarch64",
"product": {
"name": "chromium-75.0.3770.90-bp150.213.3.aarch64",
"product_id": "chromium-75.0.3770.90-bp150.213.3.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"product": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"product_id": "chromedriver-75.0.3770.90-bp150.213.3.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-75.0.3770.90-bp150.213.3.x86_64",
"product": {
"name": "chromium-75.0.3770.90-bp150.213.3.x86_64",
"product_id": "chromium-75.0.3770.90-bp150.213.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 12 SP3",
"product": {
"name": "SUSE Package Hub 12 SP3",
"product_id": "SUSE Package Hub 12 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:12:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Package Hub 15",
"product": {
"name": "SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15"
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.0",
"product": {
"name": "openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.0"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.aarch64 as component of SUSE Package Hub 12 SP3",
"product_id": "SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64"
},
"product_reference": "chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"relates_to_product_reference": "SUSE Package Hub 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.x86_64 as component of SUSE Package Hub 12 SP3",
"product_id": "SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64"
},
"product_reference": "chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-75.0.3770.90-bp150.213.3.aarch64 as component of SUSE Package Hub 12 SP3",
"product_id": "SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64"
},
"product_reference": "chromium-75.0.3770.90-bp150.213.3.aarch64",
"relates_to_product_reference": "SUSE Package Hub 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-75.0.3770.90-bp150.213.3.x86_64 as component of SUSE Package Hub 12 SP3",
"product_id": "SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64"
},
"product_reference": "chromium-75.0.3770.90-bp150.213.3.x86_64",
"relates_to_product_reference": "SUSE Package Hub 12 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.aarch64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64"
},
"product_reference": "chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64"
},
"product_reference": "chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-75.0.3770.90-bp150.213.3.aarch64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64"
},
"product_reference": "chromium-75.0.3770.90-bp150.213.3.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-75.0.3770.90-bp150.213.3.x86_64 as component of SUSE Package Hub 15",
"product_id": "SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64"
},
"product_reference": "chromium-75.0.3770.90-bp150.213.3.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.aarch64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64"
},
"product_reference": "chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64"
},
"product_reference": "chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-75.0.3770.90-bp150.213.3.aarch64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64"
},
"product_reference": "chromium-75.0.3770.90-bp150.213.3.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-75.0.3770.90-bp150.213.3.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64"
},
"product_reference": "chromium-75.0.3770.90-bp150.213.3.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.aarch64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64"
},
"product_reference": "chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-75.0.3770.90-bp150.213.3.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64"
},
"product_reference": "chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-75.0.3770.90-bp150.213.3.aarch64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64"
},
"product_reference": "chromium-75.0.3770.90-bp150.213.3.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-75.0.3770.90-bp150.213.3.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
},
"product_reference": "chromium-75.0.3770.90-bp150.213.3.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-5787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5787"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5787",
"url": "https://www.suse.com/security/cve/CVE-2019-5787"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5787",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "critical"
}
],
"title": "CVE-2019-5787"
},
{
"cve": "CVE-2019-5788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5788"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5788",
"url": "https://www.suse.com/security/cve/CVE-2019-5788"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5788",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "critical"
}
],
"title": "CVE-2019-5788"
},
{
"cve": "CVE-2019-5789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5789"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5789",
"url": "https://www.suse.com/security/cve/CVE-2019-5789"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5789",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "critical"
}
],
"title": "CVE-2019-5789"
},
{
"cve": "CVE-2019-5790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5790"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5790",
"url": "https://www.suse.com/security/cve/CVE-2019-5790"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5790",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5790"
},
{
"cve": "CVE-2019-5791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5791"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5791",
"url": "https://www.suse.com/security/cve/CVE-2019-5791"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5791",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5791"
},
{
"cve": "CVE-2019-5792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5792"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5792",
"url": "https://www.suse.com/security/cve/CVE-2019-5792"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5792",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5792"
},
{
"cve": "CVE-2019-5793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5793"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5793",
"url": "https://www.suse.com/security/cve/CVE-2019-5793"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5793",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5793"
},
{
"cve": "CVE-2019-5794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5794"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5794",
"url": "https://www.suse.com/security/cve/CVE-2019-5794"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5794",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5794"
},
{
"cve": "CVE-2019-5795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5795"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5795",
"url": "https://www.suse.com/security/cve/CVE-2019-5795"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5795",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5795"
},
{
"cve": "CVE-2019-5796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5796"
}
],
"notes": [
{
"category": "general",
"text": "Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5796",
"url": "https://www.suse.com/security/cve/CVE-2019-5796"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5796",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5796"
},
{
"cve": "CVE-2019-5797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5797"
}
],
"notes": [
{
"category": "general",
"text": "Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5797",
"url": "https://www.suse.com/security/cve/CVE-2019-5797"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5797",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5797"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-5799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5799"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect inheritance of a new document\u0027s policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5799",
"url": "https://www.suse.com/security/cve/CVE-2019-5799"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5799",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5799"
},
{
"cve": "CVE-2019-5800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5800"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5800",
"url": "https://www.suse.com/security/cve/CVE-2019-5800"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5800",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5800"
},
{
"cve": "CVE-2019-5801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5801"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5801",
"url": "https://www.suse.com/security/cve/CVE-2019-5801"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5801",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5801"
},
{
"cve": "CVE-2019-5802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5802"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5802",
"url": "https://www.suse.com/security/cve/CVE-2019-5802"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5802",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5802"
},
{
"cve": "CVE-2019-5803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5803"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5803",
"url": "https://www.suse.com/security/cve/CVE-2019-5803"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5803",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5803"
},
{
"cve": "CVE-2019-5804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5804"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5804",
"url": "https://www.suse.com/security/cve/CVE-2019-5804"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5804",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5804"
},
{
"cve": "CVE-2019-5805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5805"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5805",
"url": "https://www.suse.com/security/cve/CVE-2019-5805"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5805",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5805"
},
{
"cve": "CVE-2019-5806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5806"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5806",
"url": "https://www.suse.com/security/cve/CVE-2019-5806"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5806",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5806"
},
{
"cve": "CVE-2019-5807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5807"
}
],
"notes": [
{
"category": "general",
"text": "Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5807",
"url": "https://www.suse.com/security/cve/CVE-2019-5807"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5807",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5807"
},
{
"cve": "CVE-2019-5808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5808"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5808",
"url": "https://www.suse.com/security/cve/CVE-2019-5808"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5808",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5808"
},
{
"cve": "CVE-2019-5809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5809"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5809",
"url": "https://www.suse.com/security/cve/CVE-2019-5809"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5809",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5809"
},
{
"cve": "CVE-2019-5810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5810"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5810",
"url": "https://www.suse.com/security/cve/CVE-2019-5810"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5810",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5810"
},
{
"cve": "CVE-2019-5811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5811"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5811",
"url": "https://www.suse.com/security/cve/CVE-2019-5811"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5811",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5811"
},
{
"cve": "CVE-2019-5812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5812"
}
],
"notes": [
{
"category": "general",
"text": "Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5812",
"url": "https://www.suse.com/security/cve/CVE-2019-5812"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5812",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5812"
},
{
"cve": "CVE-2019-5813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5813"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5813",
"url": "https://www.suse.com/security/cve/CVE-2019-5813"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5813",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5813"
},
{
"cve": "CVE-2019-5814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5814"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5814",
"url": "https://www.suse.com/security/cve/CVE-2019-5814"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5814",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5814"
},
{
"cve": "CVE-2019-5815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5815"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5815",
"url": "https://www.suse.com/security/cve/CVE-2019-5815"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5815",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5815"
},
{
"cve": "CVE-2019-5816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5816"
}
],
"notes": [
{
"category": "general",
"text": "Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5816",
"url": "https://www.suse.com/security/cve/CVE-2019-5816"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5816",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5816"
},
{
"cve": "CVE-2019-5817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5817"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5817",
"url": "https://www.suse.com/security/cve/CVE-2019-5817"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5817",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5817"
},
{
"cve": "CVE-2019-5818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5818"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5818",
"url": "https://www.suse.com/security/cve/CVE-2019-5818"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5818",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5818"
},
{
"cve": "CVE-2019-5819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5819"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to clipboard.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5819",
"url": "https://www.suse.com/security/cve/CVE-2019-5819"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5819",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5819"
},
{
"cve": "CVE-2019-5820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5820"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5820",
"url": "https://www.suse.com/security/cve/CVE-2019-5820"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5820",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5820"
},
{
"cve": "CVE-2019-5821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5821"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5821",
"url": "https://www.suse.com/security/cve/CVE-2019-5821"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5821",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5821"
},
{
"cve": "CVE-2019-5822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5822"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5822",
"url": "https://www.suse.com/security/cve/CVE-2019-5822"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5822",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5822"
},
{
"cve": "CVE-2019-5823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5823"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5823",
"url": "https://www.suse.com/security/cve/CVE-2019-5823"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5823",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5823"
},
{
"cve": "CVE-2019-5824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5824"
}
],
"notes": [
{
"category": "general",
"text": "Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5824",
"url": "https://www.suse.com/security/cve/CVE-2019-5824"
},
{
"category": "external",
"summary": "SUSE Bug 1134218 for CVE-2019-5824",
"url": "https://bugzilla.suse.com/1134218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5824"
},
{
"cve": "CVE-2019-5827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5827"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5827",
"url": "https://www.suse.com/security/cve/CVE-2019-5827"
},
{
"category": "external",
"summary": "SUSE Bug 1134218 for CVE-2019-5827",
"url": "https://bugzilla.suse.com/1134218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5827"
},
{
"cve": "CVE-2019-5828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5828"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5828",
"url": "https://www.suse.com/security/cve/CVE-2019-5828"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5828",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5828"
},
{
"cve": "CVE-2019-5829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5829"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5829",
"url": "https://www.suse.com/security/cve/CVE-2019-5829"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5829",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5829"
},
{
"cve": "CVE-2019-5830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5830"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5830",
"url": "https://www.suse.com/security/cve/CVE-2019-5830"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5830",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5830"
},
{
"cve": "CVE-2019-5831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5831"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5831",
"url": "https://www.suse.com/security/cve/CVE-2019-5831"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5831",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5831"
},
{
"cve": "CVE-2019-5832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5832"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5832",
"url": "https://www.suse.com/security/cve/CVE-2019-5832"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5832",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5832"
},
{
"cve": "CVE-2019-5833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5833"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5833",
"url": "https://www.suse.com/security/cve/CVE-2019-5833"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5833",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5833"
},
{
"cve": "CVE-2019-5834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5834"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5834",
"url": "https://www.suse.com/security/cve/CVE-2019-5834"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5834",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5834"
},
{
"cve": "CVE-2019-5835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5835"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5835",
"url": "https://www.suse.com/security/cve/CVE-2019-5835"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5835",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5835"
},
{
"cve": "CVE-2019-5836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5836"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5836",
"url": "https://www.suse.com/security/cve/CVE-2019-5836"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5836",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "important"
}
],
"title": "CVE-2019-5836"
},
{
"cve": "CVE-2019-5837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5837"
}
],
"notes": [
{
"category": "general",
"text": "Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5837",
"url": "https://www.suse.com/security/cve/CVE-2019-5837"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5837",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5837"
},
{
"cve": "CVE-2019-5838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5838"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5838",
"url": "https://www.suse.com/security/cve/CVE-2019-5838"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5838",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5838"
},
{
"cve": "CVE-2019-5839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5839"
}
],
"notes": [
{
"category": "general",
"text": "Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5839",
"url": "https://www.suse.com/security/cve/CVE-2019-5839"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5839",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5839"
},
{
"cve": "CVE-2019-5840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5840"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5840",
"url": "https://www.suse.com/security/cve/CVE-2019-5840"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5840",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5840"
},
{
"cve": "CVE-2019-5842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5842"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5842",
"url": "https://www.suse.com/security/cve/CVE-2019-5842"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5842",
"url": "https://bugzilla.suse.com/1137332"
},
{
"category": "external",
"summary": "SUSE Bug 1138287 for CVE-2019-5842",
"url": "https://bugzilla.suse.com/1138287"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 12 SP3:chromium-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.aarch64",
"SUSE Package Hub 15:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.0:chromium-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromedriver-75.0.3770.90-bp150.213.3.x86_64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.aarch64",
"openSUSE Leap 15.1:chromium-75.0.3770.90-bp150.213.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-28T12:43:15Z",
"details": "moderate"
}
],
"title": "CVE-2019-5842"
}
]
}
opensuse-su-2024:10681-1
Vulnerability from csaf_opensuse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "chromedriver-93.0.4577.82-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10681",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10681-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-11215 page",
"url": "https://www.suse.com/security/cve/CVE-2017-11215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-11225 page",
"url": "https://www.suse.com/security/cve/CVE-2017-11225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15386 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15386/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15387 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15388 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15389 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15390 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15391 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15392 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15393 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15394 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15394/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15395 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15395/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15396 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15396/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15398 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15399 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15407 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15408 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15409 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15409/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15410 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15411 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15411/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15412 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15413 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15413/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15415 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15415/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15416 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15416/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15417 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15418 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15419 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15420 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15420/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15422 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15423 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15423/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15424 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15425 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15425/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15426 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15427 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15429 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-15430 page",
"url": "https://www.suse.com/security/cve/CVE-2017-15430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5006 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5007 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5008 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5008/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5009 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5010 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5011 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5012 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5013 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5014 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5015 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5016 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5017 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5018 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5019 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5020 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5021 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5022 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5023 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5024 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5025 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5026 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5030 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5035 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5041 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5044 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5052 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5053 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5054 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5055 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5056 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5057 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5058 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5059 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5060 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5061 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5062 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5063 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5064 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5065 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5066 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5067 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5068 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5069 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5070 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5071 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5072 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5072/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5073 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5074 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5075 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5076 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5077 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5078 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5079 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5080 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5081 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5082 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5083 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5085 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5086 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5087 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5088 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5089 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5091 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5092 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5093 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5094 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5094/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5095 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5096 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5097 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5098 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5099 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5100 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5101 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5102 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5103 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5104 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5105 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5106 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5107 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5108 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5109 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5110 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5111 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5112 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5113 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5114 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5115 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5116 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5117 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5118 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5119 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5119/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5120 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5121 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5122 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5124 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5125 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5126 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5127 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5128 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5129 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5130 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5131 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5132 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-5133 page",
"url": "https://www.suse.com/security/cve/CVE-2017-5133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7000 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16065 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16066 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16067 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16068 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16069 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16070 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16071 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16073 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16074 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16075 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16076 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16077 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16078 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16079 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16080 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16081 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16082 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16083 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16084 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16084/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16085 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16086 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16087 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16088 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17462 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17463 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17464 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17465 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17466 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17467 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17468 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17469 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17470 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17470/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17471 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17472 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17473 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17474 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17474/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17475 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17475/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17476 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17477 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17478 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17478/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17479 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17480 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-17481 page",
"url": "https://www.suse.com/security/cve/CVE-2018-17481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18335 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18335/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18336 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18336/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18337 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18337/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18338 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18339 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18339/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18340 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18340/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18341 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18342 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18342/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18343 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18343/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18344 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18344/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18345 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18346 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18346/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18347 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18348 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18349 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18350 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18350/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18351 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18351/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18352 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18353 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18354 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18354/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18355 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18355/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18356 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18357 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18357/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18358 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18358/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18359 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18359/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20073 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-4117 page",
"url": "https://www.suse.com/security/cve/CVE-2018-4117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-5179 page",
"url": "https://www.suse.com/security/cve/CVE-2018-5179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6031 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6031/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6032 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6033 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6034 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6034/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6035 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6036 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6036/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6037 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6038 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6039 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6040 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6041 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6042 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6043 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6044 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6045 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6046 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6047 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6048 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6049 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6049/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6050 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6051 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6052 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6053 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6054 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6056 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6057 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6060 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6061 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6062 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6063 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6064 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6065 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6066 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6067 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6068 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6069 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6070 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6071 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6072 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6072/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6073 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6074 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6075 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6076 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6077 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6078 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6079 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6080 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6081 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6082 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6083 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6085 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6086 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6087 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6087/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6088 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6088/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6089 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6090 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6091 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6092 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6093 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6094 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6094/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6095 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6096 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6097 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6098 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6099 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6100 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6101 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6102 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6103 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6104 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6105 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6106 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6107 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6108 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6109 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6110 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6111 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6112 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6113 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6114 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6115 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6116 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6117 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6118 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6120 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6121 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6122 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6123 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6124 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6125 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6126 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6127 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6128 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6129 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6130 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6131 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6132 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6133 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6134 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6135 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6136 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6137 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6138 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6139 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6140 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6141 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6142 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6143 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6144 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6145 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6147 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6148 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6149 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6153 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6154 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6155 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6156 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6157 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6158 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6159 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6160 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6161 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6162 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6163 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6164 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6165 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6166 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6167 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6167/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6168 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6170 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6171 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6172 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6173 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6174 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6175 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6176 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6177 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6178 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6179 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-6406 page",
"url": "https://www.suse.com/security/cve/CVE-2018-6406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13659 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13660 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13661 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13662 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13663 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13664 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13665 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13666 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13666/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13667 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13668 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13668/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13669 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13669/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13670 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13671 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13671/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13673 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13673/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13674 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13675 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13676 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13677 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13678 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13679 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13680 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13681 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13682 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13682/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13683 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13685 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13686 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13686/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13687 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13688 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13695 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13696 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13696/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13697 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13697/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13699 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13699/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13700 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13701 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13702 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13702/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13703 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13704 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13705 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13706 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13706/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13707 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13708 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13709 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13710 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13710/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13711 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13711/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13713 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13714 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13715 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13716 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13717 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13718 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13719 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13719/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13720 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13720/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13721 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13723 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13724 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13725 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13726 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13727 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13728 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13729 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13730 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13732 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13732/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13734 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13734/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13735 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13735/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13736 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13736/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13737 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13737/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13738 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13739 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13740 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13741 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13742 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13742/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13743 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13744 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13746 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13747 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13748 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13749 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13749/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13750 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13750/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13751 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13752 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13753 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13754 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13755 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13756 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13757 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13758 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13759 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13761 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13763 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13764 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13767 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15903 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18197 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19880 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19923 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19926 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20503 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5754 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5755 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5756 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5757 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5758 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5759 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5760 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5761 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5763 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5764 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5765 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5767 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5768 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5768/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5770 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5771 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5772 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5773 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5774 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5775 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5776 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5777 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5778 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5779 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5780 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5781 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5782 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5784 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5784/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5787 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5788 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5789 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5790 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5791 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5792 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5793 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5794 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5795 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5796 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5799 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5801 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5802 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5803 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5804 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5805 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5806 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5807 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5808 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5809 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5810 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5811 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5812 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5813 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5814 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5822 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5823 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5824 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5827 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5828 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5829 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5830 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5831 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5832 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5833 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5834 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5835 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5836 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5837 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5837/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5838 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5839 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5840 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5844 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5844/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5847 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5848 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5850 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5851 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5852 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5853 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5854 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5855 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5856 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5857 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5858 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5859 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5860 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5861 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5862 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5863 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5864 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5865 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5865/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5867 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5867/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5868 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5869 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5870 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5871 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5871/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5872 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5872/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5874 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5875 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5875/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5876 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5877 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5878 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5879 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5880 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5881 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-8075 page",
"url": "https://www.suse.com/security/cve/CVE-2019-8075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-0561 page",
"url": "https://www.suse.com/security/cve/CVE-2020-0561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15959 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15960 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15961 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15962 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15963 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15964 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15965 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15966 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15967 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15968 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15969 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15970 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15971 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15972 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15973 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15974 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15975 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15976 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15977 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15978 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15979 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15980 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15981 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15982 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15983 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15984 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15985 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15986 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15987 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15988 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15989 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15990 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15990/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15991 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15992 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15992/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15995 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15999 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16000 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16001 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16002 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16003 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16004 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16005 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16006 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16007 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16008 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16008/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16009 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16011 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16012 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16013 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16014 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16015 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16016 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16017 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16018 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16019 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16020 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16021 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16022 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16023 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16024 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16025 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16026 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16027 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16028 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16028/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16029 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16030 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16031 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16031/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16032 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16033 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16034 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16034/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16035 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16036 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16036/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16037 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16038 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16039 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16040 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16041 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16042 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16043 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16044 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-27844 page",
"url": "https://www.suse.com/security/cve/CVE-2020-27844/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6377 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6377/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6378 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6378/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6379 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6379/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6380 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6380/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6381 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6381/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6382 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6385 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6387 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6388 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6389 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6390 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6391 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6392 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6393 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6394 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6394/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6395 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6395/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6396 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6396/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6397 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6398 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6399 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6400 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6400/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6401 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6402 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6403 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6404 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6405 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6406 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6407 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6408 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6409 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6409/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6410 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6411 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6411/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6412 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6413 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6413/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6414 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6414/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6415 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6415/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6416 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6416/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6417 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6417/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6418 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6420 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6420/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6422 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6423 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6423/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6424 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6425 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6425/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6426 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6427 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6428 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6428/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6429 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6430 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6431 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6431/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6432 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6432/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6433 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6433/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6434 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6434/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6435 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6436 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6437 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6438 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6438/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6439 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6440 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6440/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6441 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6442 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6442/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6443 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6443/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6444 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6444/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6445 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6445/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6446 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6447 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6448 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6448/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6449 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6449/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6450 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6450/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6451 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6451/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6452 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6452/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6454 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6454/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6455 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6455/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6456 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6457 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6458 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6458/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6459 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6460 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6462 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6462/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6463 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6464 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6465 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6466 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6467 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6468 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6469 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6470 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6470/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6471 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6472 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6473 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6473/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6474 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6474/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6475 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6475/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6476 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6477 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6477/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6478 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6478/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6479 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6480 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6481 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6482 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6482/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6483 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6483/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6484 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6484/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6485 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6485/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6486 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6486/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6487 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6487/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6488 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6488/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6489 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6490 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6490/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6491 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6491/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6493 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6493/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6494 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6494/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6495 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6495/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6496 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6505 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6505/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6506 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6507 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6507/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6509 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6510 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6511 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6512 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6513 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6513/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6514 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6515 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6516 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6517 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6518 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6519 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6519/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6520 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6520/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6521 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6522 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6522/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6523 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6524 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6524/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6525 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6526 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6526/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6527 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6528 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6528/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6529 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6530 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6531 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6532 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6533 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6534 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6535 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6536 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6537 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6538 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6539 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6540 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6541 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6542 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6542/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6543 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6544 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6545 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6546 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6547 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6548 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6549 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6550 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6551 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6552 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6553 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6553/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6554 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6555 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6556 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6557 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6558 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6559 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6559/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6560 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6561 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6562 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6563 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6564 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6564/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6565 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6565/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6566 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6567 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6568 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6569 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6570 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6571 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6573 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6574 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6575 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6576 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6831 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21106 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21107 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21108 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21109 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21110 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21111 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21112 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21113 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21114 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21115 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21116 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21117 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21118 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21119 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21119/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21120 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21121 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21122 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21123 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21124 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21125 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21126 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21127 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21128 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21129 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21130 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21131 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21132 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21133 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21134 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21135 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21136 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21137 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21138 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21139 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21140 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21141 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21142 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21143 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21144 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21145 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21146 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21147 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21148 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21149 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21150 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21151 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21152 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21153 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21154 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21155 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21156 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21157 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21159 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21160 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21161 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21162 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21163 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21164 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21165 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21165/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21166 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21167 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21167/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21168 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21169 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21170 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21171 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21172 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21173 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21174 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21175 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21176 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21177 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21178 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21179 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21180 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21181 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21182 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21183 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21184 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21185 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21186 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21187 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21188 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21189 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21190 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21191 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21192 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21192/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21193 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21194 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21195 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21196 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21197 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21198 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21199 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21201 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21202 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21203 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21204 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21205 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21205/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21206 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21206/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21207 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21208 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21209 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21210 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21211 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21212 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21213 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21214 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21215 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21216 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21217 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21218 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21219 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21220 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21221 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21222 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21223 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21224 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21225 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21226 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21227 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21228 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21229 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21230 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21231 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21232 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21233 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30506 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30507 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30507/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30508 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30509 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30509/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30510 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30511 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30512 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30513 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30513/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30514 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30515 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30516 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30517 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30518 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30519 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30519/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30520 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30520/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30521 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30522 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30522/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30523 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30524 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30524/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30525 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30526 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30526/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30527 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30528 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30528/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30529 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30530 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30531 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30532 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30533 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30534 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30535 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30536 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30537 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30538 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30539 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30540 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30544 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30545 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30546 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30547 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30548 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30549 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30550 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30551 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30552 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30553 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30553/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30554 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30555 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30556 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30557 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30559 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30559/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30561 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30562 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30563 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30564 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30564/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30565 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30565/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30566 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30567 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30568 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30569 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30571 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30572 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30573 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30574 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30575 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30576 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30577 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30578 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30579 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30579/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30581 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30582 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30584 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30585 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30585/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30588 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30589 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30590 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30591 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30591/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30592 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30592/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30593 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30594 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30596 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30597 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30598 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30599 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30600 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30601 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30602 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30603 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30604 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30606 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30607 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30608 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30609 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30610 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30611 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30612 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30612/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30613 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30614 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30615 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30616 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30617 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30618 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30619 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30620 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30621 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30622 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30623 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30624 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30624/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30625 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30626 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30626/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30627 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30627/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30628 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30628/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30629 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30630 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30631 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30632 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30633 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30633/"
}
],
"title": "chromedriver-93.0.4577.82-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10681-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-93.0.4577.82-1.1.aarch64",
"product": {
"name": "chromedriver-93.0.4577.82-1.1.aarch64",
"product_id": "chromedriver-93.0.4577.82-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "chromium-93.0.4577.82-1.1.aarch64",
"product": {
"name": "chromium-93.0.4577.82-1.1.aarch64",
"product_id": "chromium-93.0.4577.82-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-93.0.4577.82-1.1.ppc64le",
"product": {
"name": "chromedriver-93.0.4577.82-1.1.ppc64le",
"product_id": "chromedriver-93.0.4577.82-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "chromium-93.0.4577.82-1.1.ppc64le",
"product": {
"name": "chromium-93.0.4577.82-1.1.ppc64le",
"product_id": "chromium-93.0.4577.82-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-93.0.4577.82-1.1.s390x",
"product": {
"name": "chromedriver-93.0.4577.82-1.1.s390x",
"product_id": "chromedriver-93.0.4577.82-1.1.s390x"
}
},
{
"category": "product_version",
"name": "chromium-93.0.4577.82-1.1.s390x",
"product": {
"name": "chromium-93.0.4577.82-1.1.s390x",
"product_id": "chromium-93.0.4577.82-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-93.0.4577.82-1.1.x86_64",
"product": {
"name": "chromedriver-93.0.4577.82-1.1.x86_64",
"product_id": "chromedriver-93.0.4577.82-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-93.0.4577.82-1.1.x86_64",
"product": {
"name": "chromium-93.0.4577.82-1.1.x86_64",
"product_id": "chromium-93.0.4577.82-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-93.0.4577.82-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64"
},
"product_reference": "chromedriver-93.0.4577.82-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-93.0.4577.82-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le"
},
"product_reference": "chromedriver-93.0.4577.82-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-93.0.4577.82-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x"
},
"product_reference": "chromedriver-93.0.4577.82-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-93.0.4577.82-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64"
},
"product_reference": "chromedriver-93.0.4577.82-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-93.0.4577.82-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64"
},
"product_reference": "chromium-93.0.4577.82-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-93.0.4577.82-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le"
},
"product_reference": "chromium-93.0.4577.82-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-93.0.4577.82-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x"
},
"product_reference": "chromium-93.0.4577.82-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-93.0.4577.82-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
},
"product_reference": "chromium-93.0.4577.82-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-11215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-11215"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-11215",
"url": "https://www.suse.com/security/cve/CVE-2017-11215"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2017-11215",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-11215"
},
{
"cve": "CVE-2017-11225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-11225"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-11225",
"url": "https://www.suse.com/security/cve/CVE-2017-11225"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2017-11225",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-11225"
},
{
"cve": "CVE-2017-15386",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15386"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15386",
"url": "https://www.suse.com/security/cve/CVE-2017-15386"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15386",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15386",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15386"
},
{
"cve": "CVE-2017-15387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15387"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15387",
"url": "https://www.suse.com/security/cve/CVE-2017-15387"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15387",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15387",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15387"
},
{
"cve": "CVE-2017-15388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15388"
}
],
"notes": [
{
"category": "general",
"text": "Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15388",
"url": "https://www.suse.com/security/cve/CVE-2017-15388"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15388",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15388",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15388"
},
{
"cve": "CVE-2017-15389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15389"
}
],
"notes": [
{
"category": "general",
"text": "An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15389",
"url": "https://www.suse.com/security/cve/CVE-2017-15389"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15389",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15389",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15389"
},
{
"cve": "CVE-2017-15390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15390"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15390",
"url": "https://www.suse.com/security/cve/CVE-2017-15390"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15390",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15390",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15390"
},
{
"cve": "CVE-2017-15391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15391"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15391",
"url": "https://www.suse.com/security/cve/CVE-2017-15391"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15391",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15391",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15391"
},
{
"cve": "CVE-2017-15392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15392"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Registry entry, related to PlatformIntegration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15392",
"url": "https://www.suse.com/security/cve/CVE-2017-15392"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15392",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15392",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15392"
},
{
"cve": "CVE-2017-15393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15393"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15393",
"url": "https://www.suse.com/security/cve/CVE-2017-15393"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15393",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15393",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15393"
},
{
"cve": "CVE-2017-15394",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15394"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15394",
"url": "https://www.suse.com/security/cve/CVE-2017-15394"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15394",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15394",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15394"
},
{
"cve": "CVE-2017-15395",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15395"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15395",
"url": "https://www.suse.com/security/cve/CVE-2017-15395"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-15395",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-15395",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15395"
},
{
"cve": "CVE-2017-15396",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15396"
}
],
"notes": [
{
"category": "general",
"text": "A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15396",
"url": "https://www.suse.com/security/cve/CVE-2017-15396"
},
{
"category": "external",
"summary": "SUSE Bug 1065405 for CVE-2017-15396",
"url": "https://bugzilla.suse.com/1065405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15396"
},
{
"cve": "CVE-2017-15398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15398"
}
],
"notes": [
{
"category": "general",
"text": "A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15398",
"url": "https://www.suse.com/security/cve/CVE-2017-15398"
},
{
"category": "external",
"summary": "SUSE Bug 1066851 for CVE-2017-15398",
"url": "https://bugzilla.suse.com/1066851"
},
{
"category": "external",
"summary": "SUSE Bug 1066853 for CVE-2017-15398",
"url": "https://bugzilla.suse.com/1066853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-15398"
},
{
"cve": "CVE-2017-15399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15399"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15399",
"url": "https://www.suse.com/security/cve/CVE-2017-15399"
},
{
"category": "external",
"summary": "SUSE Bug 1066851 for CVE-2017-15399",
"url": "https://bugzilla.suse.com/1066851"
},
{
"category": "external",
"summary": "SUSE Bug 1066853 for CVE-2017-15399",
"url": "https://bugzilla.suse.com/1066853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-15399"
},
{
"cve": "CVE-2017-15407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15407"
}
],
"notes": [
{
"category": "general",
"text": "Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15407",
"url": "https://www.suse.com/security/cve/CVE-2017-15407"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15407",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15407"
},
{
"cve": "CVE-2017-15408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15408"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15408",
"url": "https://www.suse.com/security/cve/CVE-2017-15408"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15408",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15408"
},
{
"cve": "CVE-2017-15409",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15409"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15409",
"url": "https://www.suse.com/security/cve/CVE-2017-15409"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15409",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15409"
},
{
"cve": "CVE-2017-15410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15410"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15410",
"url": "https://www.suse.com/security/cve/CVE-2017-15410"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15410",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15410"
},
{
"cve": "CVE-2017-15411",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15411"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15411",
"url": "https://www.suse.com/security/cve/CVE-2017-15411"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15411",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15411"
},
{
"cve": "CVE-2017-15412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15412"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15412",
"url": "https://www.suse.com/security/cve/CVE-2017-15412"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077993 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1077993"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-15412",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15412"
},
{
"cve": "CVE-2017-15413",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15413"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15413",
"url": "https://www.suse.com/security/cve/CVE-2017-15413"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15413",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15413"
},
{
"cve": "CVE-2017-15415",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15415"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15415",
"url": "https://www.suse.com/security/cve/CVE-2017-15415"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15415",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15415"
},
{
"cve": "CVE-2017-15416",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15416"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15416",
"url": "https://www.suse.com/security/cve/CVE-2017-15416"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15416",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15416"
},
{
"cve": "CVE-2017-15417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15417"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15417",
"url": "https://www.suse.com/security/cve/CVE-2017-15417"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15417",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15417"
},
{
"cve": "CVE-2017-15418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15418"
}
],
"notes": [
{
"category": "general",
"text": "Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15418",
"url": "https://www.suse.com/security/cve/CVE-2017-15418"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15418",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15418"
},
{
"cve": "CVE-2017-15419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15419"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15419",
"url": "https://www.suse.com/security/cve/CVE-2017-15419"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15419",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15419"
},
{
"cve": "CVE-2017-15420",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15420"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15420",
"url": "https://www.suse.com/security/cve/CVE-2017-15420"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15420",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2017-15420",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15420"
},
{
"cve": "CVE-2017-15422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15422"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15422",
"url": "https://www.suse.com/security/cve/CVE-2017-15422"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15422",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1077999 for CVE-2017-15422",
"url": "https://bugzilla.suse.com/1077999"
},
{
"category": "external",
"summary": "SUSE Bug 1123121 for CVE-2017-15422",
"url": "https://bugzilla.suse.com/1123121"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-15422"
},
{
"cve": "CVE-2017-15423",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15423"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15423",
"url": "https://www.suse.com/security/cve/CVE-2017-15423"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15423",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15423"
},
{
"cve": "CVE-2017-15424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15424"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15424",
"url": "https://www.suse.com/security/cve/CVE-2017-15424"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15424",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15424"
},
{
"cve": "CVE-2017-15425",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15425"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15425",
"url": "https://www.suse.com/security/cve/CVE-2017-15425"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15425",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15425"
},
{
"cve": "CVE-2017-15426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15426"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15426",
"url": "https://www.suse.com/security/cve/CVE-2017-15426"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15426",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15426"
},
{
"cve": "CVE-2017-15427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15427"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15427",
"url": "https://www.suse.com/security/cve/CVE-2017-15427"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15427",
"url": "https://bugzilla.suse.com/1071691"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15427"
},
{
"cve": "CVE-2017-15429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15429"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15429",
"url": "https://www.suse.com/security/cve/CVE-2017-15429"
},
{
"category": "external",
"summary": "SUSE Bug 1072976 for CVE-2017-15429",
"url": "https://bugzilla.suse.com/1072976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-15429"
},
{
"cve": "CVE-2017-15430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-15430"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-15430",
"url": "https://www.suse.com/security/cve/CVE-2017-15430"
},
{
"category": "external",
"summary": "SUSE Bug 1071691 for CVE-2017-15430",
"url": "https://bugzilla.suse.com/1071691"
},
{
"category": "external",
"summary": "SUSE Bug 1106341 for CVE-2017-15430",
"url": "https://bugzilla.suse.com/1106341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-15430"
},
{
"cve": "CVE-2017-5006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5006"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5006",
"url": "https://www.suse.com/security/cve/CVE-2017-5006"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5006",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5006"
},
{
"cve": "CVE-2017-5007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5007"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5007",
"url": "https://www.suse.com/security/cve/CVE-2017-5007"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5007",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5007"
},
{
"cve": "CVE-2017-5008",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5008"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5008",
"url": "https://www.suse.com/security/cve/CVE-2017-5008"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5008",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5008"
},
{
"cve": "CVE-2017-5009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5009"
}
],
"notes": [
{
"category": "general",
"text": "WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5009",
"url": "https://www.suse.com/security/cve/CVE-2017-5009"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5009",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5009"
},
{
"cve": "CVE-2017-5010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5010"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5010",
"url": "https://www.suse.com/security/cve/CVE-2017-5010"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5010",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5010"
},
{
"cve": "CVE-2017-5011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5011"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5011",
"url": "https://www.suse.com/security/cve/CVE-2017-5011"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5011",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5011"
},
{
"cve": "CVE-2017-5012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5012"
}
],
"notes": [
{
"category": "general",
"text": "A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5012",
"url": "https://www.suse.com/security/cve/CVE-2017-5012"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5012",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5012"
},
{
"cve": "CVE-2017-5013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5013"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5013",
"url": "https://www.suse.com/security/cve/CVE-2017-5013"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5013",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5013"
},
{
"cve": "CVE-2017-5014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5014"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5014",
"url": "https://www.suse.com/security/cve/CVE-2017-5014"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5014",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5014"
},
{
"cve": "CVE-2017-5015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5015"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5015",
"url": "https://www.suse.com/security/cve/CVE-2017-5015"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5015",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5015"
},
{
"cve": "CVE-2017-5016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5016"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don\u0027t control via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5016",
"url": "https://www.suse.com/security/cve/CVE-2017-5016"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5016",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5016"
},
{
"cve": "CVE-2017-5017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5017"
}
],
"notes": [
{
"category": "general",
"text": "Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5017",
"url": "https://www.suse.com/security/cve/CVE-2017-5017"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5017",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5017"
},
{
"cve": "CVE-2017-5018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5018"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5018",
"url": "https://www.suse.com/security/cve/CVE-2017-5018"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5018",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5018"
},
{
"cve": "CVE-2017-5019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5019"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5019",
"url": "https://www.suse.com/security/cve/CVE-2017-5019"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5019",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5019"
},
{
"cve": "CVE-2017-5020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5020"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5020",
"url": "https://www.suse.com/security/cve/CVE-2017-5020"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5020",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5020"
},
{
"cve": "CVE-2017-5021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5021"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5021",
"url": "https://www.suse.com/security/cve/CVE-2017-5021"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5021",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5021"
},
{
"cve": "CVE-2017-5022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5022"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5022",
"url": "https://www.suse.com/security/cve/CVE-2017-5022"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5022",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5022"
},
{
"cve": "CVE-2017-5023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5023"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5023",
"url": "https://www.suse.com/security/cve/CVE-2017-5023"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5023",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5023"
},
{
"cve": "CVE-2017-5024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5024"
}
],
"notes": [
{
"category": "general",
"text": "FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5024",
"url": "https://www.suse.com/security/cve/CVE-2017-5024"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5024",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5024"
},
{
"cve": "CVE-2017-5025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5025"
}
],
"notes": [
{
"category": "general",
"text": "FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5025",
"url": "https://www.suse.com/security/cve/CVE-2017-5025"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5025",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5025"
},
{
"cve": "CVE-2017-5026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5026"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don\u0027t control via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5026",
"url": "https://www.suse.com/security/cve/CVE-2017-5026"
},
{
"category": "external",
"summary": "SUSE Bug 1022049 for CVE-2017-5026",
"url": "https://bugzilla.suse.com/1022049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5026"
},
{
"cve": "CVE-2017-5030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5030"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5030",
"url": "https://www.suse.com/security/cve/CVE-2017-5030"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5030",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5030",
"url": "https://bugzilla.suse.com/1028875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5030"
},
{
"cve": "CVE-2017-5035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5035"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5035",
"url": "https://www.suse.com/security/cve/CVE-2017-5035"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5035",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5035",
"url": "https://bugzilla.suse.com/1028875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5035"
},
{
"cve": "CVE-2017-5041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5041"
}
],
"notes": [
{
"category": "general",
"text": "Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5041",
"url": "https://www.suse.com/security/cve/CVE-2017-5041"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5041",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5041",
"url": "https://bugzilla.suse.com/1028875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5041"
},
{
"cve": "CVE-2017-5044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5044"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5044",
"url": "https://www.suse.com/security/cve/CVE-2017-5044"
},
{
"category": "external",
"summary": "SUSE Bug 1028848 for CVE-2017-5044",
"url": "https://bugzilla.suse.com/1028848"
},
{
"category": "external",
"summary": "SUSE Bug 1028875 for CVE-2017-5044",
"url": "https://bugzilla.suse.com/1028875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5044"
},
{
"cve": "CVE-2017-5052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5052"
}
],
"notes": [
{
"category": "general",
"text": "An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5052",
"url": "https://www.suse.com/security/cve/CVE-2017-5052"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5052",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5052"
},
{
"cve": "CVE-2017-5053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5053"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5053",
"url": "https://www.suse.com/security/cve/CVE-2017-5053"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5053",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5053"
},
{
"cve": "CVE-2017-5054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5054"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5054",
"url": "https://www.suse.com/security/cve/CVE-2017-5054"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5054",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5054"
},
{
"cve": "CVE-2017-5055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5055"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5055",
"url": "https://www.suse.com/security/cve/CVE-2017-5055"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5055",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5055"
},
{
"cve": "CVE-2017-5056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5056"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5056",
"url": "https://www.suse.com/security/cve/CVE-2017-5056"
},
{
"category": "external",
"summary": "SUSE Bug 1031677 for CVE-2017-5056",
"url": "https://bugzilla.suse.com/1031677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-5056"
},
{
"cve": "CVE-2017-5057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5057"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5057",
"url": "https://www.suse.com/security/cve/CVE-2017-5057"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5057",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5057"
},
{
"cve": "CVE-2017-5058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5058"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5058",
"url": "https://www.suse.com/security/cve/CVE-2017-5058"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5058",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5058"
},
{
"cve": "CVE-2017-5059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5059"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5059",
"url": "https://www.suse.com/security/cve/CVE-2017-5059"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5059",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5059"
},
{
"cve": "CVE-2017-5060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5060"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5060",
"url": "https://www.suse.com/security/cve/CVE-2017-5060"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5060",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5060"
},
{
"cve": "CVE-2017-5061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5061"
}
],
"notes": [
{
"category": "general",
"text": "A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5061",
"url": "https://www.suse.com/security/cve/CVE-2017-5061"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5061",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5061"
},
{
"cve": "CVE-2017-5062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5062"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5062",
"url": "https://www.suse.com/security/cve/CVE-2017-5062"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5062",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5062"
},
{
"cve": "CVE-2017-5063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5063"
}
],
"notes": [
{
"category": "general",
"text": "A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5063",
"url": "https://www.suse.com/security/cve/CVE-2017-5063"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5063",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5063"
},
{
"cve": "CVE-2017-5064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5064"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5064",
"url": "https://www.suse.com/security/cve/CVE-2017-5064"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5064",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5064"
},
{
"cve": "CVE-2017-5065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5065"
}
],
"notes": [
{
"category": "general",
"text": "Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially confuse a user into making an incorrect security decision via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5065",
"url": "https://www.suse.com/security/cve/CVE-2017-5065"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5065",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5065"
},
{
"cve": "CVE-2017-5066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5066"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5066",
"url": "https://www.suse.com/security/cve/CVE-2017-5066"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5066",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5066"
},
{
"cve": "CVE-2017-5067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5067"
}
],
"notes": [
{
"category": "general",
"text": "An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5067",
"url": "https://www.suse.com/security/cve/CVE-2017-5067"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5067",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5067"
},
{
"cve": "CVE-2017-5068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5068"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5068",
"url": "https://www.suse.com/security/cve/CVE-2017-5068"
},
{
"category": "external",
"summary": "SUSE Bug 1037594 for CVE-2017-5068",
"url": "https://bugzilla.suse.com/1037594"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5068"
},
{
"cve": "CVE-2017-5069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5069"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5069",
"url": "https://www.suse.com/security/cve/CVE-2017-5069"
},
{
"category": "external",
"summary": "SUSE Bug 1035103 for CVE-2017-5069",
"url": "https://bugzilla.suse.com/1035103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5069"
},
{
"cve": "CVE-2017-5070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5070"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5070",
"url": "https://www.suse.com/security/cve/CVE-2017-5070"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5070",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5070"
},
{
"cve": "CVE-2017-5071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5071"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5071",
"url": "https://www.suse.com/security/cve/CVE-2017-5071"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5071",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5071"
},
{
"cve": "CVE-2017-5072",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5072"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5072",
"url": "https://www.suse.com/security/cve/CVE-2017-5072"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5072",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5072"
},
{
"cve": "CVE-2017-5073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5073"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5073",
"url": "https://www.suse.com/security/cve/CVE-2017-5073"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5073",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5073"
},
{
"cve": "CVE-2017-5074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5074"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5074",
"url": "https://www.suse.com/security/cve/CVE-2017-5074"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5074",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5074"
},
{
"cve": "CVE-2017-5075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5075"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5075",
"url": "https://www.suse.com/security/cve/CVE-2017-5075"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5075",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5075"
},
{
"cve": "CVE-2017-5076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5076"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5076",
"url": "https://www.suse.com/security/cve/CVE-2017-5076"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5076",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5076"
},
{
"cve": "CVE-2017-5077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5077"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5077",
"url": "https://www.suse.com/security/cve/CVE-2017-5077"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5077",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5077"
},
{
"cve": "CVE-2017-5078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5078"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Blink\u0027s mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5078",
"url": "https://www.suse.com/security/cve/CVE-2017-5078"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5078",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5078"
},
{
"cve": "CVE-2017-5079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5079"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5079",
"url": "https://www.suse.com/security/cve/CVE-2017-5079"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5079",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5079"
},
{
"cve": "CVE-2017-5080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5080"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5080",
"url": "https://www.suse.com/security/cve/CVE-2017-5080"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5080",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5080"
},
{
"cve": "CVE-2017-5081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5081"
}
],
"notes": [
{
"category": "general",
"text": "Lack of verification of an extension\u0027s locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5081",
"url": "https://www.suse.com/security/cve/CVE-2017-5081"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5081",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5081"
},
{
"cve": "CVE-2017-5082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5082"
}
],
"notes": [
{
"category": "general",
"text": "Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5082",
"url": "https://www.suse.com/security/cve/CVE-2017-5082"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5082",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5082"
},
{
"cve": "CVE-2017-5083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5083"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5083",
"url": "https://www.suse.com/security/cve/CVE-2017-5083"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5083",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5083"
},
{
"cve": "CVE-2017-5085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5085"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5085",
"url": "https://www.suse.com/security/cve/CVE-2017-5085"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5085",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5085"
},
{
"cve": "CVE-2017-5086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5086"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5086",
"url": "https://www.suse.com/security/cve/CVE-2017-5086"
},
{
"category": "external",
"summary": "SUSE Bug 1042833 for CVE-2017-5086",
"url": "https://bugzilla.suse.com/1042833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5086"
},
{
"cve": "CVE-2017-5087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5087"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5087",
"url": "https://www.suse.com/security/cve/CVE-2017-5087"
},
{
"category": "external",
"summary": "SUSE Bug 1044690 for CVE-2017-5087",
"url": "https://bugzilla.suse.com/1044690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5087"
},
{
"cve": "CVE-2017-5088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5088"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5088",
"url": "https://www.suse.com/security/cve/CVE-2017-5088"
},
{
"category": "external",
"summary": "SUSE Bug 1044690 for CVE-2017-5088",
"url": "https://bugzilla.suse.com/1044690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5088"
},
{
"cve": "CVE-2017-5089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5089"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5089",
"url": "https://www.suse.com/security/cve/CVE-2017-5089"
},
{
"category": "external",
"summary": "SUSE Bug 1044690 for CVE-2017-5089",
"url": "https://bugzilla.suse.com/1044690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5089"
},
{
"cve": "CVE-2017-5091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5091"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5091",
"url": "https://www.suse.com/security/cve/CVE-2017-5091"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5091",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5091"
},
{
"cve": "CVE-2017-5092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5092"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5092",
"url": "https://www.suse.com/security/cve/CVE-2017-5092"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5092",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5092"
},
{
"cve": "CVE-2017-5093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5093"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5093",
"url": "https://www.suse.com/security/cve/CVE-2017-5093"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5093",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5093"
},
{
"cve": "CVE-2017-5094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5094"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5094",
"url": "https://www.suse.com/security/cve/CVE-2017-5094"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5094",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5094"
},
{
"cve": "CVE-2017-5095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5095"
}
],
"notes": [
{
"category": "general",
"text": "Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5095",
"url": "https://www.suse.com/security/cve/CVE-2017-5095"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5095",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5095"
},
{
"cve": "CVE-2017-5096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5096"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5096",
"url": "https://www.suse.com/security/cve/CVE-2017-5096"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5096",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5096"
},
{
"cve": "CVE-2017-5097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5097"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5097",
"url": "https://www.suse.com/security/cve/CVE-2017-5097"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5097",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5097"
},
{
"cve": "CVE-2017-5098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5098"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5098",
"url": "https://www.suse.com/security/cve/CVE-2017-5098"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5098",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5098"
},
{
"cve": "CVE-2017-5099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5099"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5099",
"url": "https://www.suse.com/security/cve/CVE-2017-5099"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5099",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5099"
},
{
"cve": "CVE-2017-5100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5100"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5100",
"url": "https://www.suse.com/security/cve/CVE-2017-5100"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5100",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5100"
},
{
"cve": "CVE-2017-5101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5101"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5101",
"url": "https://www.suse.com/security/cve/CVE-2017-5101"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5101",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5101"
},
{
"cve": "CVE-2017-5102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5102"
}
],
"notes": [
{
"category": "general",
"text": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5102",
"url": "https://www.suse.com/security/cve/CVE-2017-5102"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5102",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5102"
},
{
"cve": "CVE-2017-5103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5103"
}
],
"notes": [
{
"category": "general",
"text": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5103",
"url": "https://www.suse.com/security/cve/CVE-2017-5103"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5103",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5103"
},
{
"cve": "CVE-2017-5104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5104"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5104",
"url": "https://www.suse.com/security/cve/CVE-2017-5104"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5104",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5104"
},
{
"cve": "CVE-2017-5105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5105"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5105",
"url": "https://www.suse.com/security/cve/CVE-2017-5105"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5105",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5105"
},
{
"cve": "CVE-2017-5106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5106"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5106",
"url": "https://www.suse.com/security/cve/CVE-2017-5106"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5106",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5106"
},
{
"cve": "CVE-2017-5107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5107"
}
],
"notes": [
{
"category": "general",
"text": "A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe\u0027d via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5107",
"url": "https://www.suse.com/security/cve/CVE-2017-5107"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5107",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5107"
},
{
"cve": "CVE-2017-5108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5108"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5108",
"url": "https://www.suse.com/security/cve/CVE-2017-5108"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5108",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5108"
},
{
"cve": "CVE-2017-5109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5109"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5109",
"url": "https://www.suse.com/security/cve/CVE-2017-5109"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5109",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5109"
},
{
"cve": "CVE-2017-5110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5110"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5110",
"url": "https://www.suse.com/security/cve/CVE-2017-5110"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-5110",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5110"
},
{
"cve": "CVE-2017-5111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5111"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5111",
"url": "https://www.suse.com/security/cve/CVE-2017-5111"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5111",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5111"
},
{
"cve": "CVE-2017-5112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5112"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5112",
"url": "https://www.suse.com/security/cve/CVE-2017-5112"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5112",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5112"
},
{
"cve": "CVE-2017-5113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5113"
}
],
"notes": [
{
"category": "general",
"text": "Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5113",
"url": "https://www.suse.com/security/cve/CVE-2017-5113"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5113",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5113"
},
{
"cve": "CVE-2017-5114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5114"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5114",
"url": "https://www.suse.com/security/cve/CVE-2017-5114"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5114",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5114"
},
{
"cve": "CVE-2017-5115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5115"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5115",
"url": "https://www.suse.com/security/cve/CVE-2017-5115"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5115",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5115"
},
{
"cve": "CVE-2017-5116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5116"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5116",
"url": "https://www.suse.com/security/cve/CVE-2017-5116"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5116",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5116"
},
{
"cve": "CVE-2017-5117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5117"
}
],
"notes": [
{
"category": "general",
"text": "Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5117",
"url": "https://www.suse.com/security/cve/CVE-2017-5117"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5117",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5117"
},
{
"cve": "CVE-2017-5118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5118"
}
],
"notes": [
{
"category": "general",
"text": "Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5118",
"url": "https://www.suse.com/security/cve/CVE-2017-5118"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5118",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5118"
},
{
"cve": "CVE-2017-5119",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5119"
}
],
"notes": [
{
"category": "general",
"text": "Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5119",
"url": "https://www.suse.com/security/cve/CVE-2017-5119"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5119",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5119"
},
{
"cve": "CVE-2017-5120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5120"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial \"www.\" substring).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5120",
"url": "https://www.suse.com/security/cve/CVE-2017-5120"
},
{
"category": "external",
"summary": "SUSE Bug 1057364 for CVE-2017-5120",
"url": "https://bugzilla.suse.com/1057364"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-5120"
},
{
"cve": "CVE-2017-5121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5121"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5121",
"url": "https://www.suse.com/security/cve/CVE-2017-5121"
},
{
"category": "external",
"summary": "SUSE Bug 1060019 for CVE-2017-5121",
"url": "https://bugzilla.suse.com/1060019"
},
{
"category": "external",
"summary": "SUSE Bug 1060020 for CVE-2017-5121",
"url": "https://bugzilla.suse.com/1060020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5121"
},
{
"cve": "CVE-2017-5122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5122"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5122",
"url": "https://www.suse.com/security/cve/CVE-2017-5122"
},
{
"category": "external",
"summary": "SUSE Bug 1060019 for CVE-2017-5122",
"url": "https://bugzilla.suse.com/1060019"
},
{
"category": "external",
"summary": "SUSE Bug 1060020 for CVE-2017-5122",
"url": "https://bugzilla.suse.com/1060020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5122"
},
{
"cve": "CVE-2017-5124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5124"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5124",
"url": "https://www.suse.com/security/cve/CVE-2017-5124"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5124",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5124",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5124"
},
{
"cve": "CVE-2017-5125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5125"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5125",
"url": "https://www.suse.com/security/cve/CVE-2017-5125"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5125",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5125",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5125"
},
{
"cve": "CVE-2017-5126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5126"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5126",
"url": "https://www.suse.com/security/cve/CVE-2017-5126"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5126",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5126",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5126"
},
{
"cve": "CVE-2017-5127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5127"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5127",
"url": "https://www.suse.com/security/cve/CVE-2017-5127"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5127",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5127",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5127"
},
{
"cve": "CVE-2017-5128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5128"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5128",
"url": "https://www.suse.com/security/cve/CVE-2017-5128"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5128",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5128",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5128"
},
{
"cve": "CVE-2017-5129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5129"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5129",
"url": "https://www.suse.com/security/cve/CVE-2017-5129"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5129",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5129",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5129"
},
{
"cve": "CVE-2017-5130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5130"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5130",
"url": "https://www.suse.com/security/cve/CVE-2017-5130"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1064089"
},
{
"category": "external",
"summary": "SUSE Bug 1078806 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1078806"
},
{
"category": "external",
"summary": "SUSE Bug 1123129 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1123129"
},
{
"category": "external",
"summary": "SUSE Bug 1123919 for CVE-2017-5130",
"url": "https://bugzilla.suse.com/1123919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5130"
},
{
"cve": "CVE-2017-5131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5131"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5131",
"url": "https://www.suse.com/security/cve/CVE-2017-5131"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5131",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5131",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5131"
},
{
"cve": "CVE-2017-5132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5132"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5132",
"url": "https://www.suse.com/security/cve/CVE-2017-5132"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5132",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5132",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5132"
},
{
"cve": "CVE-2017-5133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-5133"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-5133",
"url": "https://www.suse.com/security/cve/CVE-2017-5133"
},
{
"category": "external",
"summary": "SUSE Bug 1064066 for CVE-2017-5133",
"url": "https://bugzilla.suse.com/1064066"
},
{
"category": "external",
"summary": "SUSE Bug 1064089 for CVE-2017-5133",
"url": "https://bugzilla.suse.com/1064089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-5133"
},
{
"cve": "CVE-2017-7000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7000"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7000",
"url": "https://www.suse.com/security/cve/CVE-2017-7000"
},
{
"category": "external",
"summary": "SUSE Bug 1050537 for CVE-2017-7000",
"url": "https://bugzilla.suse.com/1050537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-7000"
},
{
"cve": "CVE-2018-16065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16065"
}
],
"notes": [
{
"category": "general",
"text": "A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16065",
"url": "https://www.suse.com/security/cve/CVE-2018-16065"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16065",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16065",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16065",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16065"
},
{
"cve": "CVE-2018-16066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16066"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16066",
"url": "https://www.suse.com/security/cve/CVE-2018-16066"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16066",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16066",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16066",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16066"
},
{
"cve": "CVE-2018-16067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16067"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16067",
"url": "https://www.suse.com/security/cve/CVE-2018-16067"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16067",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16067",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16067",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16067"
},
{
"cve": "CVE-2018-16068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16068"
}
],
"notes": [
{
"category": "general",
"text": "Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16068",
"url": "https://www.suse.com/security/cve/CVE-2018-16068"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16068",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16068",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16068",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16068"
},
{
"cve": "CVE-2018-16069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16069"
}
],
"notes": [
{
"category": "general",
"text": "Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16069",
"url": "https://www.suse.com/security/cve/CVE-2018-16069"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16069",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16069",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16069",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16069"
},
{
"cve": "CVE-2018-16070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16070"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16070",
"url": "https://www.suse.com/security/cve/CVE-2018-16070"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16070",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16070",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16070",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16070"
},
{
"cve": "CVE-2018-16071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16071"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16071",
"url": "https://www.suse.com/security/cve/CVE-2018-16071"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16071",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16071",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16071",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16071"
},
{
"cve": "CVE-2018-16073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16073"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16073",
"url": "https://www.suse.com/security/cve/CVE-2018-16073"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16073",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16073",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16073",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16073"
},
{
"cve": "CVE-2018-16074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16074"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16074",
"url": "https://www.suse.com/security/cve/CVE-2018-16074"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16074",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16074",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16074",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16074"
},
{
"cve": "CVE-2018-16075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16075"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16075",
"url": "https://www.suse.com/security/cve/CVE-2018-16075"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16075",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16075",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16075",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16075"
},
{
"cve": "CVE-2018-16076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16076"
}
],
"notes": [
{
"category": "general",
"text": "Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16076",
"url": "https://www.suse.com/security/cve/CVE-2018-16076"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16076",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16076",
"url": "https://bugzilla.suse.com/1107235"
},
{
"category": "external",
"summary": "SUSE Bug 1110628 for CVE-2018-16076",
"url": "https://bugzilla.suse.com/1110628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16076"
},
{
"cve": "CVE-2018-16077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16077"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16077",
"url": "https://www.suse.com/security/cve/CVE-2018-16077"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16077",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16077",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16077",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16077"
},
{
"cve": "CVE-2018-16078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16078"
}
],
"notes": [
{
"category": "general",
"text": "Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16078",
"url": "https://www.suse.com/security/cve/CVE-2018-16078"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16078",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16078",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16078",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16078"
},
{
"cve": "CVE-2018-16079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16079"
}
],
"notes": [
{
"category": "general",
"text": "A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16079",
"url": "https://www.suse.com/security/cve/CVE-2018-16079"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16079",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16079",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16079",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16079"
},
{
"cve": "CVE-2018-16080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16080"
}
],
"notes": [
{
"category": "general",
"text": "A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16080",
"url": "https://www.suse.com/security/cve/CVE-2018-16080"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16080",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16080",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16080",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16080"
},
{
"cve": "CVE-2018-16081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16081"
}
],
"notes": [
{
"category": "general",
"text": "Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16081",
"url": "https://www.suse.com/security/cve/CVE-2018-16081"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16081",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16081",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16081",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16081"
},
{
"cve": "CVE-2018-16082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16082"
}
],
"notes": [
{
"category": "general",
"text": "An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16082",
"url": "https://www.suse.com/security/cve/CVE-2018-16082"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16082",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16082",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16082",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16082"
},
{
"cve": "CVE-2018-16083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16083"
}
],
"notes": [
{
"category": "general",
"text": "An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16083",
"url": "https://www.suse.com/security/cve/CVE-2018-16083"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16083",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16083",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16083",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16083"
},
{
"cve": "CVE-2018-16084",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16084"
}
],
"notes": [
{
"category": "general",
"text": "The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perform certain operations to open external programs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16084",
"url": "https://www.suse.com/security/cve/CVE-2018-16084"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16084",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16084",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16084",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16084"
},
{
"cve": "CVE-2018-16085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16085"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16085",
"url": "https://www.suse.com/security/cve/CVE-2018-16085"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16085",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16085",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16085",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16085"
},
{
"cve": "CVE-2018-16086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16086"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16086",
"url": "https://www.suse.com/security/cve/CVE-2018-16086"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16086",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16086",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16086",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16086"
},
{
"cve": "CVE-2018-16087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16087"
}
],
"notes": [
{
"category": "general",
"text": "Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16087",
"url": "https://www.suse.com/security/cve/CVE-2018-16087"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16087",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16087",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16087",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16087"
},
{
"cve": "CVE-2018-16088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16088"
}
],
"notes": [
{
"category": "general",
"text": "A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16088",
"url": "https://www.suse.com/security/cve/CVE-2018-16088"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-16088",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-16088",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-16088",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16088"
},
{
"cve": "CVE-2018-17462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17462"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17462",
"url": "https://www.suse.com/security/cve/CVE-2018-17462"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17462",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17462",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17462"
},
{
"cve": "CVE-2018-17463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17463"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17463",
"url": "https://www.suse.com/security/cve/CVE-2018-17463"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17463",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17463",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17463"
},
{
"cve": "CVE-2018-17464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17464"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17464",
"url": "https://www.suse.com/security/cve/CVE-2018-17464"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17464",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17464",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17464"
},
{
"cve": "CVE-2018-17465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17465"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17465",
"url": "https://www.suse.com/security/cve/CVE-2018-17465"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17465",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17465",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17465"
},
{
"cve": "CVE-2018-17466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17466"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17466",
"url": "https://www.suse.com/security/cve/CVE-2018-17466"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1119105"
},
{
"category": "external",
"summary": "SUSE Bug 1121207 for CVE-2018-17466",
"url": "https://bugzilla.suse.com/1121207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17466"
},
{
"cve": "CVE-2018-17467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17467"
}
],
"notes": [
{
"category": "general",
"text": "Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17467",
"url": "https://www.suse.com/security/cve/CVE-2018-17467"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17467",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17467",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17467"
},
{
"cve": "CVE-2018-17468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17468"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17468",
"url": "https://www.suse.com/security/cve/CVE-2018-17468"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17468",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17468",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17468"
},
{
"cve": "CVE-2018-17469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17469"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17469",
"url": "https://www.suse.com/security/cve/CVE-2018-17469"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17469",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17469",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17469"
},
{
"cve": "CVE-2018-17470",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17470"
}
],
"notes": [
{
"category": "general",
"text": "A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17470",
"url": "https://www.suse.com/security/cve/CVE-2018-17470"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17470",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17470",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17470"
},
{
"cve": "CVE-2018-17471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17471"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17471",
"url": "https://www.suse.com/security/cve/CVE-2018-17471"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17471",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17471",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17471"
},
{
"cve": "CVE-2018-17472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17472"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the \u003ciframe\u003e sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17472",
"url": "https://www.suse.com/security/cve/CVE-2018-17472"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17472",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17472",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17472"
},
{
"cve": "CVE-2018-17473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17473"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17473",
"url": "https://www.suse.com/security/cve/CVE-2018-17473"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17473",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17473",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17473"
},
{
"cve": "CVE-2018-17474",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17474"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17474",
"url": "https://www.suse.com/security/cve/CVE-2018-17474"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17474",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17474",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17474"
},
{
"cve": "CVE-2018-17475",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17475"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17475",
"url": "https://www.suse.com/security/cve/CVE-2018-17475"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17475",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17475",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17475"
},
{
"cve": "CVE-2018-17476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17476"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17476",
"url": "https://www.suse.com/security/cve/CVE-2018-17476"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17476",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17476",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17476"
},
{
"cve": "CVE-2018-17477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17477"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17477",
"url": "https://www.suse.com/security/cve/CVE-2018-17477"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-17477",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-17477",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-17477"
},
{
"cve": "CVE-2018-17478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17478"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17478",
"url": "https://www.suse.com/security/cve/CVE-2018-17478"
},
{
"category": "external",
"summary": "SUSE Bug 1115537 for CVE-2018-17478",
"url": "https://bugzilla.suse.com/1115537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-17478"
},
{
"cve": "CVE-2018-17479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17479"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17479",
"url": "https://www.suse.com/security/cve/CVE-2018-17479"
},
{
"category": "external",
"summary": "SUSE Bug 1116608 for CVE-2018-17479",
"url": "https://bugzilla.suse.com/1116608"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-17479"
},
{
"cve": "CVE-2018-17480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17480"
}
],
"notes": [
{
"category": "general",
"text": "Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17480",
"url": "https://www.suse.com/security/cve/CVE-2018-17480"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-17480",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-17480",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-17480"
},
{
"cve": "CVE-2018-17481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-17481"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-17481",
"url": "https://www.suse.com/security/cve/CVE-2018-17481"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-17481",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1119364 for CVE-2018-17481",
"url": "https://bugzilla.suse.com/1119364"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-17481",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-17481"
},
{
"cve": "CVE-2018-18335",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18335"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18335",
"url": "https://www.suse.com/security/cve/CVE-2018-18335"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18335",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18335",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18335"
},
{
"cve": "CVE-2018-18336",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18336"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18336",
"url": "https://www.suse.com/security/cve/CVE-2018-18336"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18336",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18336",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18336"
},
{
"cve": "CVE-2018-18337",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18337"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18337",
"url": "https://www.suse.com/security/cve/CVE-2018-18337"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18337",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18337",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18337"
},
{
"cve": "CVE-2018-18338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18338"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18338",
"url": "https://www.suse.com/security/cve/CVE-2018-18338"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18338",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18338",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18338"
},
{
"cve": "CVE-2018-18339",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18339"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18339",
"url": "https://www.suse.com/security/cve/CVE-2018-18339"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18339",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18339",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18339"
},
{
"cve": "CVE-2018-18340",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18340"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18340",
"url": "https://www.suse.com/security/cve/CVE-2018-18340"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18340",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18340",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18340"
},
{
"cve": "CVE-2018-18341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18341"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18341",
"url": "https://www.suse.com/security/cve/CVE-2018-18341"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18341",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18341",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18341"
},
{
"cve": "CVE-2018-18342",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18342"
}
],
"notes": [
{
"category": "general",
"text": "Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18342",
"url": "https://www.suse.com/security/cve/CVE-2018-18342"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18342",
"url": "https://bugzilla.suse.com/1118529"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18342"
},
{
"cve": "CVE-2018-18343",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18343"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18343",
"url": "https://www.suse.com/security/cve/CVE-2018-18343"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18343",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18343",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18343"
},
{
"cve": "CVE-2018-18344",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18344"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18344",
"url": "https://www.suse.com/security/cve/CVE-2018-18344"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18344",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18344",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18344"
},
{
"cve": "CVE-2018-18345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18345"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18345",
"url": "https://www.suse.com/security/cve/CVE-2018-18345"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18345",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18345",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18345"
},
{
"cve": "CVE-2018-18346",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18346"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18346",
"url": "https://www.suse.com/security/cve/CVE-2018-18346"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18346",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18346",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18346"
},
{
"cve": "CVE-2018-18347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18347"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18347",
"url": "https://www.suse.com/security/cve/CVE-2018-18347"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18347",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18347",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18347"
},
{
"cve": "CVE-2018-18348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18348"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18348",
"url": "https://www.suse.com/security/cve/CVE-2018-18348"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18348",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18348",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18348"
},
{
"cve": "CVE-2018-18349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18349"
}
],
"notes": [
{
"category": "general",
"text": "Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18349",
"url": "https://www.suse.com/security/cve/CVE-2018-18349"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18349",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18349",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18349"
},
{
"cve": "CVE-2018-18350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18350"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18350",
"url": "https://www.suse.com/security/cve/CVE-2018-18350"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18350",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18350",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18350"
},
{
"cve": "CVE-2018-18351",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18351"
}
],
"notes": [
{
"category": "general",
"text": "Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass SameSite cookie policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18351",
"url": "https://www.suse.com/security/cve/CVE-2018-18351"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18351",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18351",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18351"
},
{
"cve": "CVE-2018-18352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18352"
}
],
"notes": [
{
"category": "general",
"text": "Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18352",
"url": "https://www.suse.com/security/cve/CVE-2018-18352"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18352",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18352",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18352"
},
{
"cve": "CVE-2018-18353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18353"
}
],
"notes": [
{
"category": "general",
"text": "Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of an auto dialog via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18353",
"url": "https://www.suse.com/security/cve/CVE-2018-18353"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18353",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18353",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18353"
},
{
"cve": "CVE-2018-18354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18354"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80 allowed a remote attacker to launch external programs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18354",
"url": "https://www.suse.com/security/cve/CVE-2018-18354"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18354",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18354",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18354"
},
{
"cve": "CVE-2018-18355",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18355"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18355",
"url": "https://www.suse.com/security/cve/CVE-2018-18355"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18355",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18355",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18355"
},
{
"cve": "CVE-2018-18356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18356"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18356",
"url": "https://www.suse.com/security/cve/CVE-2018-18356"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18356",
"url": "https://bugzilla.suse.com/1125396"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18356"
},
{
"cve": "CVE-2018-18357",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18357"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18357",
"url": "https://www.suse.com/security/cve/CVE-2018-18357"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18357",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18357",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18357"
},
{
"cve": "CVE-2018-18358",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18358"
}
],
"notes": [
{
"category": "general",
"text": "Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to proxy resources on localhost via a crafted WPAD file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18358",
"url": "https://www.suse.com/security/cve/CVE-2018-18358"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18358",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18358",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18358"
},
{
"cve": "CVE-2018-18359",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18359"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18359",
"url": "https://www.suse.com/security/cve/CVE-2018-18359"
},
{
"category": "external",
"summary": "SUSE Bug 1118529 for CVE-2018-18359",
"url": "https://bugzilla.suse.com/1118529"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18359",
"url": "https://bugzilla.suse.com/1125330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-18359"
},
{
"cve": "CVE-2018-20073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20073"
}
],
"notes": [
{
"category": "general",
"text": "Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20073",
"url": "https://www.suse.com/security/cve/CVE-2018-20073"
},
{
"category": "external",
"summary": "SUSE Bug 1120892 for CVE-2018-20073",
"url": "https://bugzilla.suse.com/1120892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-20073"
},
{
"cve": "CVE-2018-4117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-4117"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the \"WebKit\" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-4117",
"url": "https://www.suse.com/security/cve/CVE-2018-4117"
},
{
"category": "external",
"summary": "SUSE Bug 1088182 for CVE-2018-4117",
"url": "https://bugzilla.suse.com/1088182"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-4117",
"url": "https://bugzilla.suse.com/1102530"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-4117"
},
{
"cve": "CVE-2018-5179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-5179"
}
],
"notes": [
{
"category": "general",
"text": "A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-5179",
"url": "https://www.suse.com/security/cve/CVE-2018-5179"
},
{
"category": "external",
"summary": "SUSE Bug 1112111 for CVE-2018-5179",
"url": "https://bugzilla.suse.com/1112111"
},
{
"category": "external",
"summary": "SUSE Bug 1119105 for CVE-2018-5179",
"url": "https://bugzilla.suse.com/1119105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-5179"
},
{
"cve": "CVE-2018-6031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6031"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6031",
"url": "https://www.suse.com/security/cve/CVE-2018-6031"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6031",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6031"
},
{
"cve": "CVE-2018-6032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6032"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6032",
"url": "https://www.suse.com/security/cve/CVE-2018-6032"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6032",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6032"
},
{
"cve": "CVE-2018-6033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6033"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6033",
"url": "https://www.suse.com/security/cve/CVE-2018-6033"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6033",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6033"
},
{
"cve": "CVE-2018-6034",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6034"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6034",
"url": "https://www.suse.com/security/cve/CVE-2018-6034"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6034",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6034"
},
{
"cve": "CVE-2018-6035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6035"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6035",
"url": "https://www.suse.com/security/cve/CVE-2018-6035"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6035",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6035"
},
{
"cve": "CVE-2018-6036",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6036"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6036",
"url": "https://www.suse.com/security/cve/CVE-2018-6036"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6036",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6036"
},
{
"cve": "CVE-2018-6037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6037"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6037",
"url": "https://www.suse.com/security/cve/CVE-2018-6037"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6037",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6037"
},
{
"cve": "CVE-2018-6038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6038"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6038",
"url": "https://www.suse.com/security/cve/CVE-2018-6038"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6038",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6038"
},
{
"cve": "CVE-2018-6039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6039"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6039",
"url": "https://www.suse.com/security/cve/CVE-2018-6039"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6039",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6039"
},
{
"cve": "CVE-2018-6040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6040"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6040",
"url": "https://www.suse.com/security/cve/CVE-2018-6040"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6040",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6040"
},
{
"cve": "CVE-2018-6041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6041"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6041",
"url": "https://www.suse.com/security/cve/CVE-2018-6041"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6041",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6041"
},
{
"cve": "CVE-2018-6042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6042"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6042",
"url": "https://www.suse.com/security/cve/CVE-2018-6042"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6042",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6042"
},
{
"cve": "CVE-2018-6043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6043"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6043",
"url": "https://www.suse.com/security/cve/CVE-2018-6043"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6043",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6043"
},
{
"cve": "CVE-2018-6044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6044"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-16064. Reason: This candidate is a reservation duplicate of CVE-2018-16064. Notes: All CVE users should reference CVE-2018-16064 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6044",
"url": "https://www.suse.com/security/cve/CVE-2018-6044"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6044",
"url": "https://bugzilla.suse.com/1077571"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6044",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6044",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6044",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6044"
},
{
"cve": "CVE-2018-6045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6045"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6045",
"url": "https://www.suse.com/security/cve/CVE-2018-6045"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6045",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6045"
},
{
"cve": "CVE-2018-6046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6046"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6046",
"url": "https://www.suse.com/security/cve/CVE-2018-6046"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6046",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6046"
},
{
"cve": "CVE-2018-6047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6047"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6047",
"url": "https://www.suse.com/security/cve/CVE-2018-6047"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6047",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6047"
},
{
"cve": "CVE-2018-6048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6048"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak referrer information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6048",
"url": "https://www.suse.com/security/cve/CVE-2018-6048"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6048",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6048"
},
{
"cve": "CVE-2018-6049",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6049"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is granted via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6049",
"url": "https://www.suse.com/security/cve/CVE-2018-6049"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6049",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6049"
},
{
"cve": "CVE-2018-6050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6050"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6050",
"url": "https://www.suse.com/security/cve/CVE-2018-6050"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6050",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6050"
},
{
"cve": "CVE-2018-6051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6051"
}
],
"notes": [
{
"category": "general",
"text": "XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6051",
"url": "https://www.suse.com/security/cve/CVE-2018-6051"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6051",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6051"
},
{
"cve": "CVE-2018-6052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6052"
}
],
"notes": [
{
"category": "general",
"text": "Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6052",
"url": "https://www.suse.com/security/cve/CVE-2018-6052"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6052",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6052"
},
{
"cve": "CVE-2018-6053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6053"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6053",
"url": "https://www.suse.com/security/cve/CVE-2018-6053"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6053",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6053"
},
{
"cve": "CVE-2018-6054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6054"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6054",
"url": "https://www.suse.com/security/cve/CVE-2018-6054"
},
{
"category": "external",
"summary": "SUSE Bug 1077571 for CVE-2018-6054",
"url": "https://bugzilla.suse.com/1077571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6054"
},
{
"cve": "CVE-2018-6056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6056"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6056",
"url": "https://www.suse.com/security/cve/CVE-2018-6056"
},
{
"category": "external",
"summary": "SUSE Bug 1080920 for CVE-2018-6056",
"url": "https://bugzilla.suse.com/1080920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6056"
},
{
"cve": "CVE-2018-6057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6057"
}
],
"notes": [
{
"category": "general",
"text": "Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6057",
"url": "https://www.suse.com/security/cve/CVE-2018-6057"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6057",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6057"
},
{
"cve": "CVE-2018-6060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6060"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6060",
"url": "https://www.suse.com/security/cve/CVE-2018-6060"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6060",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6060"
},
{
"cve": "CVE-2018-6061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6061"
}
],
"notes": [
{
"category": "general",
"text": "A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6061",
"url": "https://www.suse.com/security/cve/CVE-2018-6061"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6061",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6061"
},
{
"cve": "CVE-2018-6062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6062"
}
],
"notes": [
{
"category": "general",
"text": "Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6062",
"url": "https://www.suse.com/security/cve/CVE-2018-6062"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6062",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6062"
},
{
"cve": "CVE-2018-6063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6063"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6063",
"url": "https://www.suse.com/security/cve/CVE-2018-6063"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6063",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6063"
},
{
"cve": "CVE-2018-6064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6064"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6064",
"url": "https://www.suse.com/security/cve/CVE-2018-6064"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6064",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6064"
},
{
"cve": "CVE-2018-6065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6065"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6065",
"url": "https://www.suse.com/security/cve/CVE-2018-6065"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6065",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6065"
},
{
"cve": "CVE-2018-6066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6066"
}
],
"notes": [
{
"category": "general",
"text": "Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6066",
"url": "https://www.suse.com/security/cve/CVE-2018-6066"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6066",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6066"
},
{
"cve": "CVE-2018-6067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6067"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6067",
"url": "https://www.suse.com/security/cve/CVE-2018-6067"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6067",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6067"
},
{
"cve": "CVE-2018-6068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6068"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6068",
"url": "https://www.suse.com/security/cve/CVE-2018-6068"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6068",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6068"
},
{
"cve": "CVE-2018-6069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6069"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6069",
"url": "https://www.suse.com/security/cve/CVE-2018-6069"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6069",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6069"
},
{
"cve": "CVE-2018-6070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6070"
}
],
"notes": [
{
"category": "general",
"text": "Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6070",
"url": "https://www.suse.com/security/cve/CVE-2018-6070"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6070",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6070"
},
{
"cve": "CVE-2018-6071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6071"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6071",
"url": "https://www.suse.com/security/cve/CVE-2018-6071"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6071",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6071"
},
{
"cve": "CVE-2018-6072",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6072"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6072",
"url": "https://www.suse.com/security/cve/CVE-2018-6072"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6072",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6072"
},
{
"cve": "CVE-2018-6073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6073"
}
],
"notes": [
{
"category": "general",
"text": "A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6073",
"url": "https://www.suse.com/security/cve/CVE-2018-6073"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6073",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6073"
},
{
"cve": "CVE-2018-6074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6074"
}
],
"notes": [
{
"category": "general",
"text": "Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6074",
"url": "https://www.suse.com/security/cve/CVE-2018-6074"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6074",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6074"
},
{
"cve": "CVE-2018-6075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6075"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6075",
"url": "https://www.suse.com/security/cve/CVE-2018-6075"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6075",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6075"
},
{
"cve": "CVE-2018-6076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6076"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6076",
"url": "https://www.suse.com/security/cve/CVE-2018-6076"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6076",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6076"
},
{
"cve": "CVE-2018-6077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6077"
}
],
"notes": [
{
"category": "general",
"text": "Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6077",
"url": "https://www.suse.com/security/cve/CVE-2018-6077"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6077",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6077"
},
{
"cve": "CVE-2018-6078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6078"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6078",
"url": "https://www.suse.com/security/cve/CVE-2018-6078"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6078",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6078"
},
{
"cve": "CVE-2018-6079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6079"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6079",
"url": "https://www.suse.com/security/cve/CVE-2018-6079"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6079",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6079"
},
{
"cve": "CVE-2018-6080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6080"
}
],
"notes": [
{
"category": "general",
"text": "Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to obtain memory metadata from privileged processes .",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6080",
"url": "https://www.suse.com/security/cve/CVE-2018-6080"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6080",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6080"
},
{
"cve": "CVE-2018-6081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6081"
}
],
"notes": [
{
"category": "general",
"text": "XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open Developer Console to inject arbitrary scripts or HTML via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6081",
"url": "https://www.suse.com/security/cve/CVE-2018-6081"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6081",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6081"
},
{
"cve": "CVE-2018-6082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6082"
}
],
"notes": [
{
"category": "general",
"text": "Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6082",
"url": "https://www.suse.com/security/cve/CVE-2018-6082"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6082",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6082"
},
{
"cve": "CVE-2018-6083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6083"
}
],
"notes": [
{
"category": "general",
"text": "Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6083",
"url": "https://www.suse.com/security/cve/CVE-2018-6083"
},
{
"category": "external",
"summary": "SUSE Bug 1084296 for CVE-2018-6083",
"url": "https://bugzilla.suse.com/1084296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6083"
},
{
"cve": "CVE-2018-6085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6085"
}
],
"notes": [
{
"category": "general",
"text": "Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6085",
"url": "https://www.suse.com/security/cve/CVE-2018-6085"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6085",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6085"
},
{
"cve": "CVE-2018-6086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6086"
}
],
"notes": [
{
"category": "general",
"text": "A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6086",
"url": "https://www.suse.com/security/cve/CVE-2018-6086"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6086",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6086"
},
{
"cve": "CVE-2018-6087",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6087"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6087",
"url": "https://www.suse.com/security/cve/CVE-2018-6087"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6087",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6087"
},
{
"cve": "CVE-2018-6088",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6088"
}
],
"notes": [
{
"category": "general",
"text": "An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6088",
"url": "https://www.suse.com/security/cve/CVE-2018-6088"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6088",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6088"
},
{
"cve": "CVE-2018-6089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6089"
}
],
"notes": [
{
"category": "general",
"text": "A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6089",
"url": "https://www.suse.com/security/cve/CVE-2018-6089"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6089",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6089"
},
{
"cve": "CVE-2018-6090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6090"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6090",
"url": "https://www.suse.com/security/cve/CVE-2018-6090"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6090",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6090"
},
{
"cve": "CVE-2018-6091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6091"
}
],
"notes": [
{
"category": "general",
"text": "Service Workers can intercept any request made by an \u003cembed\u003e or \u003cobject\u003e tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6091",
"url": "https://www.suse.com/security/cve/CVE-2018-6091"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6091",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6091"
},
{
"cve": "CVE-2018-6092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6092"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6092",
"url": "https://www.suse.com/security/cve/CVE-2018-6092"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6092",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6092"
},
{
"cve": "CVE-2018-6093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6093"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6093",
"url": "https://www.suse.com/security/cve/CVE-2018-6093"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6093",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6093"
},
{
"cve": "CVE-2018-6094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6094"
}
],
"notes": [
{
"category": "general",
"text": "Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6094",
"url": "https://www.suse.com/security/cve/CVE-2018-6094"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6094",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6094"
},
{
"cve": "CVE-2018-6095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6095"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6095",
"url": "https://www.suse.com/security/cve/CVE-2018-6095"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6095",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6095"
},
{
"cve": "CVE-2018-6096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6096"
}
],
"notes": [
{
"category": "general",
"text": "A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6096",
"url": "https://www.suse.com/security/cve/CVE-2018-6096"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6096",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6096"
},
{
"cve": "CVE-2018-6097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6097"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen without showing a warning via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6097",
"url": "https://www.suse.com/security/cve/CVE-2018-6097"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6097",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6097"
},
{
"cve": "CVE-2018-6098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6098"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6098",
"url": "https://www.suse.com/security/cve/CVE-2018-6098"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6098",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6098"
},
{
"cve": "CVE-2018-6099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6099"
}
],
"notes": [
{
"category": "general",
"text": "A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6099",
"url": "https://www.suse.com/security/cve/CVE-2018-6099"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6099",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6099"
},
{
"cve": "CVE-2018-6100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6100"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6100",
"url": "https://www.suse.com/security/cve/CVE-2018-6100"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6100",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6100"
},
{
"cve": "CVE-2018-6101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6101"
}
],
"notes": [
{
"category": "general",
"text": "A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote DevTools debugging server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6101",
"url": "https://www.suse.com/security/cve/CVE-2018-6101"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6101",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6101"
},
{
"cve": "CVE-2018-6102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6102"
}
],
"notes": [
{
"category": "general",
"text": "Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6102",
"url": "https://www.suse.com/security/cve/CVE-2018-6102"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6102",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6102"
},
{
"cve": "CVE-2018-6103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6103"
}
],
"notes": [
{
"category": "general",
"text": "A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6103",
"url": "https://www.suse.com/security/cve/CVE-2018-6103"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6103",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6103"
},
{
"cve": "CVE-2018-6104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6104"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6104",
"url": "https://www.suse.com/security/cve/CVE-2018-6104"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6104",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6104"
},
{
"cve": "CVE-2018-6105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6105"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6105",
"url": "https://www.suse.com/security/cve/CVE-2018-6105"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6105",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6105"
},
{
"cve": "CVE-2018-6106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6106"
}
],
"notes": [
{
"category": "general",
"text": "An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6106",
"url": "https://www.suse.com/security/cve/CVE-2018-6106"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6106",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6106"
},
{
"cve": "CVE-2018-6107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6107"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6107",
"url": "https://www.suse.com/security/cve/CVE-2018-6107"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6107",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6107"
},
{
"cve": "CVE-2018-6108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6108"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6108",
"url": "https://www.suse.com/security/cve/CVE-2018-6108"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6108",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6108"
},
{
"cve": "CVE-2018-6109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6109"
}
],
"notes": [
{
"category": "general",
"text": "readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6109",
"url": "https://www.suse.com/security/cve/CVE-2018-6109"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6109",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6109"
},
{
"cve": "CVE-2018-6110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6110"
}
],
"notes": [
{
"category": "general",
"text": "Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6110",
"url": "https://www.suse.com/security/cve/CVE-2018-6110"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6110",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6110"
},
{
"cve": "CVE-2018-6111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6111"
}
],
"notes": [
{
"category": "general",
"text": "An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6111",
"url": "https://www.suse.com/security/cve/CVE-2018-6111"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6111",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6111"
},
{
"cve": "CVE-2018-6112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6112"
}
],
"notes": [
{
"category": "general",
"text": "Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6112",
"url": "https://www.suse.com/security/cve/CVE-2018-6112"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6112",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6112"
},
{
"cve": "CVE-2018-6113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6113"
}
],
"notes": [
{
"category": "general",
"text": "Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6113",
"url": "https://www.suse.com/security/cve/CVE-2018-6113"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6113",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6113"
},
{
"cve": "CVE-2018-6114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6114"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect enforcement of CSP for \u003cobject\u003e tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6114",
"url": "https://www.suse.com/security/cve/CVE-2018-6114"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6114",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6114"
},
{
"cve": "CVE-2018-6115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6115"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially bypass OS malware checks via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6115",
"url": "https://www.suse.com/security/cve/CVE-2018-6115"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6115",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6115"
},
{
"cve": "CVE-2018-6116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6116"
}
],
"notes": [
{
"category": "general",
"text": "A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6116",
"url": "https://www.suse.com/security/cve/CVE-2018-6116"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6116",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6116"
},
{
"cve": "CVE-2018-6117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6117"
}
],
"notes": [
{
"category": "general",
"text": "Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6117",
"url": "https://www.suse.com/security/cve/CVE-2018-6117"
},
{
"category": "external",
"summary": "SUSE Bug 1090000 for CVE-2018-6117",
"url": "https://bugzilla.suse.com/1090000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6117"
},
{
"cve": "CVE-2018-6118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6118"
}
],
"notes": [
{
"category": "general",
"text": "A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6118",
"url": "https://www.suse.com/security/cve/CVE-2018-6118"
},
{
"category": "external",
"summary": "SUSE Bug 1091288 for CVE-2018-6118",
"url": "https://bugzilla.suse.com/1091288"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6118"
},
{
"cve": "CVE-2018-6120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6120"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6120",
"url": "https://www.suse.com/security/cve/CVE-2018-6120"
},
{
"category": "external",
"summary": "SUSE Bug 1092923 for CVE-2018-6120",
"url": "https://bugzilla.suse.com/1092923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6120"
},
{
"cve": "CVE-2018-6121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6121"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6121",
"url": "https://www.suse.com/security/cve/CVE-2018-6121"
},
{
"category": "external",
"summary": "SUSE Bug 1092923 for CVE-2018-6121",
"url": "https://bugzilla.suse.com/1092923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6121"
},
{
"cve": "CVE-2018-6122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6122"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6122",
"url": "https://www.suse.com/security/cve/CVE-2018-6122"
},
{
"category": "external",
"summary": "SUSE Bug 1092923 for CVE-2018-6122",
"url": "https://bugzilla.suse.com/1092923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6122"
},
{
"cve": "CVE-2018-6123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6123"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6123",
"url": "https://www.suse.com/security/cve/CVE-2018-6123"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6123",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6123"
},
{
"cve": "CVE-2018-6124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6124"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6124",
"url": "https://www.suse.com/security/cve/CVE-2018-6124"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6124",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6124"
},
{
"cve": "CVE-2018-6125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6125"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6125",
"url": "https://www.suse.com/security/cve/CVE-2018-6125"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6125",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6125"
},
{
"cve": "CVE-2018-6126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6126"
}
],
"notes": [
{
"category": "general",
"text": "A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6126",
"url": "https://www.suse.com/security/cve/CVE-2018-6126"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6126",
"url": "https://bugzilla.suse.com/1095163"
},
{
"category": "external",
"summary": "SUSE Bug 1096449 for CVE-2018-6126",
"url": "https://bugzilla.suse.com/1096449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6126"
},
{
"cve": "CVE-2018-6127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6127"
}
],
"notes": [
{
"category": "general",
"text": "Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6127",
"url": "https://www.suse.com/security/cve/CVE-2018-6127"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6127",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-6127"
},
{
"cve": "CVE-2018-6128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6128"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6128",
"url": "https://www.suse.com/security/cve/CVE-2018-6128"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6128",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6128"
},
{
"cve": "CVE-2018-6129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6129"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6129",
"url": "https://www.suse.com/security/cve/CVE-2018-6129"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6129",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6129"
},
{
"cve": "CVE-2018-6130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6130"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6130",
"url": "https://www.suse.com/security/cve/CVE-2018-6130"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6130",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6130"
},
{
"cve": "CVE-2018-6131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6131"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6131",
"url": "https://www.suse.com/security/cve/CVE-2018-6131"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6131",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6131"
},
{
"cve": "CVE-2018-6132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6132"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6132",
"url": "https://www.suse.com/security/cve/CVE-2018-6132"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6132",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6132"
},
{
"cve": "CVE-2018-6133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6133"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6133",
"url": "https://www.suse.com/security/cve/CVE-2018-6133"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6133",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6133"
},
{
"cve": "CVE-2018-6134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6134"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6134",
"url": "https://www.suse.com/security/cve/CVE-2018-6134"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6134",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6134"
},
{
"cve": "CVE-2018-6135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6135"
}
],
"notes": [
{
"category": "general",
"text": "Lack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6135",
"url": "https://www.suse.com/security/cve/CVE-2018-6135"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6135",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6135"
},
{
"cve": "CVE-2018-6136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6136"
}
],
"notes": [
{
"category": "general",
"text": "Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6136",
"url": "https://www.suse.com/security/cve/CVE-2018-6136"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6136",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6136"
},
{
"cve": "CVE-2018-6137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6137"
}
],
"notes": [
{
"category": "general",
"text": "CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6137",
"url": "https://www.suse.com/security/cve/CVE-2018-6137"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6137",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6137"
},
{
"cve": "CVE-2018-6138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6138"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6138",
"url": "https://www.suse.com/security/cve/CVE-2018-6138"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6138",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6138"
},
{
"cve": "CVE-2018-6139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6139"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6139",
"url": "https://www.suse.com/security/cve/CVE-2018-6139"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6139",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6139"
},
{
"cve": "CVE-2018-6140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6140"
}
],
"notes": [
{
"category": "general",
"text": "Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6140",
"url": "https://www.suse.com/security/cve/CVE-2018-6140"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6140",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-6140"
},
{
"cve": "CVE-2018-6141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6141"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6141",
"url": "https://www.suse.com/security/cve/CVE-2018-6141"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6141",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6141"
},
{
"cve": "CVE-2018-6142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6142"
}
],
"notes": [
{
"category": "general",
"text": "Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6142",
"url": "https://www.suse.com/security/cve/CVE-2018-6142"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6142",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6142"
},
{
"cve": "CVE-2018-6143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6143"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6143",
"url": "https://www.suse.com/security/cve/CVE-2018-6143"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6143",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6143"
},
{
"cve": "CVE-2018-6144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6144"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6144",
"url": "https://www.suse.com/security/cve/CVE-2018-6144"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6144",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6144"
},
{
"cve": "CVE-2018-6145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6145"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6145",
"url": "https://www.suse.com/security/cve/CVE-2018-6145"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6145",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6145"
},
{
"cve": "CVE-2018-6147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6147"
}
],
"notes": [
{
"category": "general",
"text": "Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information from process memory via a local process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6147",
"url": "https://www.suse.com/security/cve/CVE-2018-6147"
},
{
"category": "external",
"summary": "SUSE Bug 1095163 for CVE-2018-6147",
"url": "https://bugzilla.suse.com/1095163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6147"
},
{
"cve": "CVE-2018-6148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6148"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6148",
"url": "https://www.suse.com/security/cve/CVE-2018-6148"
},
{
"category": "external",
"summary": "SUSE Bug 1096508 for CVE-2018-6148",
"url": "https://bugzilla.suse.com/1096508"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-6148"
},
{
"cve": "CVE-2018-6149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6149"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6149",
"url": "https://www.suse.com/security/cve/CVE-2018-6149"
},
{
"category": "external",
"summary": "SUSE Bug 1097452 for CVE-2018-6149",
"url": "https://bugzilla.suse.com/1097452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6149"
},
{
"cve": "CVE-2018-6153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6153"
}
],
"notes": [
{
"category": "general",
"text": "A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6153",
"url": "https://www.suse.com/security/cve/CVE-2018-6153"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6153",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6153",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6153",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6153"
},
{
"cve": "CVE-2018-6154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6154"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6154",
"url": "https://www.suse.com/security/cve/CVE-2018-6154"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6154",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6154",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6154",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6154"
},
{
"cve": "CVE-2018-6155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6155"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6155",
"url": "https://www.suse.com/security/cve/CVE-2018-6155"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6155",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6155",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6155",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6155"
},
{
"cve": "CVE-2018-6156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6156"
}
],
"notes": [
{
"category": "general",
"text": "Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6156",
"url": "https://www.suse.com/security/cve/CVE-2018-6156"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6156",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6156",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6156",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6156"
},
{
"cve": "CVE-2018-6157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6157"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6157",
"url": "https://www.suse.com/security/cve/CVE-2018-6157"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6157",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6157",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6157",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6157"
},
{
"cve": "CVE-2018-6158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6158"
}
],
"notes": [
{
"category": "general",
"text": "A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6158",
"url": "https://www.suse.com/security/cve/CVE-2018-6158"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6158",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6158",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6158",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6158"
},
{
"cve": "CVE-2018-6159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6159"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6159",
"url": "https://www.suse.com/security/cve/CVE-2018-6159"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6159",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6159",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6159",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6159"
},
{
"cve": "CVE-2018-6160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6160"
}
],
"notes": [
{
"category": "general",
"text": "JavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6160",
"url": "https://www.suse.com/security/cve/CVE-2018-6160"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6160",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6160",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6160",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6160"
},
{
"cve": "CVE-2018-6161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6161"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6161",
"url": "https://www.suse.com/security/cve/CVE-2018-6161"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6161",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6161",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6161",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6161"
},
{
"cve": "CVE-2018-6162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6162"
}
],
"notes": [
{
"category": "general",
"text": "Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6162",
"url": "https://www.suse.com/security/cve/CVE-2018-6162"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6162",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6162",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6162",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6162"
},
{
"cve": "CVE-2018-6163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6163"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6163",
"url": "https://www.suse.com/security/cve/CVE-2018-6163"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6163",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6163",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6163",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6163"
},
{
"cve": "CVE-2018-6164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6164"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6164",
"url": "https://www.suse.com/security/cve/CVE-2018-6164"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6164",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6164",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6164",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6164"
},
{
"cve": "CVE-2018-6165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6165"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6165",
"url": "https://www.suse.com/security/cve/CVE-2018-6165"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6165",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6165",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6165",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6165"
},
{
"cve": "CVE-2018-6166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6166"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6166",
"url": "https://www.suse.com/security/cve/CVE-2018-6166"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6166",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6166",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6166",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6166"
},
{
"cve": "CVE-2018-6167",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6167"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6167",
"url": "https://www.suse.com/security/cve/CVE-2018-6167"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6167",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6167",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6167",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6167"
},
{
"cve": "CVE-2018-6168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6168"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6168",
"url": "https://www.suse.com/security/cve/CVE-2018-6168"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6168",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6168",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6168",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6168"
},
{
"cve": "CVE-2018-6169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6169"
}
],
"notes": [
{
"category": "general",
"text": "Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6169",
"url": "https://www.suse.com/security/cve/CVE-2018-6169"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6169",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6169",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6169",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6169"
},
{
"cve": "CVE-2018-6170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6170"
}
],
"notes": [
{
"category": "general",
"text": "A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6170",
"url": "https://www.suse.com/security/cve/CVE-2018-6170"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6170",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6170",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6170",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6170"
},
{
"cve": "CVE-2018-6171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6171"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6171",
"url": "https://www.suse.com/security/cve/CVE-2018-6171"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6171",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6171",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6171",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6171"
},
{
"cve": "CVE-2018-6172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6172"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6172",
"url": "https://www.suse.com/security/cve/CVE-2018-6172"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6172",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6172",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6172",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6172"
},
{
"cve": "CVE-2018-6173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6173"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6173",
"url": "https://www.suse.com/security/cve/CVE-2018-6173"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6173",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6173",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6173",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6173"
},
{
"cve": "CVE-2018-6174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6174"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6174",
"url": "https://www.suse.com/security/cve/CVE-2018-6174"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6174",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6174",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6174",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6174"
},
{
"cve": "CVE-2018-6175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6175"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6175",
"url": "https://www.suse.com/security/cve/CVE-2018-6175"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6175",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6175",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6175",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6175"
},
{
"cve": "CVE-2018-6176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6176"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6176",
"url": "https://www.suse.com/security/cve/CVE-2018-6176"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6176",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6176",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6176",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6176"
},
{
"cve": "CVE-2018-6177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6177"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6177",
"url": "https://www.suse.com/security/cve/CVE-2018-6177"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6177",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6177",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6177",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6177"
},
{
"cve": "CVE-2018-6178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6178"
}
],
"notes": [
{
"category": "general",
"text": "Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to Hide Chrome Security UI via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6178",
"url": "https://www.suse.com/security/cve/CVE-2018-6178"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6178",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6178",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6178",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6178"
},
{
"cve": "CVE-2018-6179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6179"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6179",
"url": "https://www.suse.com/security/cve/CVE-2018-6179"
},
{
"category": "external",
"summary": "SUSE Bug 1086124 for CVE-2018-6179",
"url": "https://bugzilla.suse.com/1086124"
},
{
"category": "external",
"summary": "SUSE Bug 1102530 for CVE-2018-6179",
"url": "https://bugzilla.suse.com/1102530"
},
{
"category": "external",
"summary": "SUSE Bug 1107235 for CVE-2018-6179",
"url": "https://bugzilla.suse.com/1107235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6179"
},
{
"cve": "CVE-2018-6406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-6406"
}
],
"notes": [
{
"category": "general",
"text": "The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or possibly have unspecified other impact.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-6406",
"url": "https://www.suse.com/security/cve/CVE-2018-6406"
},
{
"category": "external",
"summary": "SUSE Bug 1078463 for CVE-2018-6406",
"url": "https://bugzilla.suse.com/1078463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-6406"
},
{
"cve": "CVE-2019-13659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13659"
}
],
"notes": [
{
"category": "general",
"text": "IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13659",
"url": "https://www.suse.com/security/cve/CVE-2019-13659"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13659",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13659"
},
{
"cve": "CVE-2019-13660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13660"
}
],
"notes": [
{
"category": "general",
"text": "UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13660",
"url": "https://www.suse.com/security/cve/CVE-2019-13660"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13660",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13660"
},
{
"cve": "CVE-2019-13661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13661"
}
],
"notes": [
{
"category": "general",
"text": "UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13661",
"url": "https://www.suse.com/security/cve/CVE-2019-13661"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13661",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13661"
},
{
"cve": "CVE-2019-13662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13662"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13662",
"url": "https://www.suse.com/security/cve/CVE-2019-13662"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13662",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13662"
},
{
"cve": "CVE-2019-13663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13663"
}
],
"notes": [
{
"category": "general",
"text": "IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13663",
"url": "https://www.suse.com/security/cve/CVE-2019-13663"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13663",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13663"
},
{
"cve": "CVE-2019-13664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13664"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13664",
"url": "https://www.suse.com/security/cve/CVE-2019-13664"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13664",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13664"
},
{
"cve": "CVE-2019-13665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13665"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple file download protection via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13665",
"url": "https://www.suse.com/security/cve/CVE-2019-13665"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13665",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13665"
},
{
"cve": "CVE-2019-13666",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13666"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13666",
"url": "https://www.suse.com/security/cve/CVE-2019-13666"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13666",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13666"
},
{
"cve": "CVE-2019-13667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13667"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13667",
"url": "https://www.suse.com/security/cve/CVE-2019-13667"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13667",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13667"
},
{
"cve": "CVE-2019-13668",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13668"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13668",
"url": "https://www.suse.com/security/cve/CVE-2019-13668"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13668",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13668"
},
{
"cve": "CVE-2019-13669",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13669"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect data validation in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13669",
"url": "https://www.suse.com/security/cve/CVE-2019-13669"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13669",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13669"
},
{
"cve": "CVE-2019-13670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13670"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13670",
"url": "https://www.suse.com/security/cve/CVE-2019-13670"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13670",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13670"
},
{
"cve": "CVE-2019-13671",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13671"
}
],
"notes": [
{
"category": "general",
"text": "UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13671",
"url": "https://www.suse.com/security/cve/CVE-2019-13671"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13671",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13671"
},
{
"cve": "CVE-2019-13673",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13673"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13673",
"url": "https://www.suse.com/security/cve/CVE-2019-13673"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13673",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13673"
},
{
"cve": "CVE-2019-13674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13674"
}
],
"notes": [
{
"category": "general",
"text": "IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13674",
"url": "https://www.suse.com/security/cve/CVE-2019-13674"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13674",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13674"
},
{
"cve": "CVE-2019-13675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13675"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in extensions in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to disable extensions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13675",
"url": "https://www.suse.com/security/cve/CVE-2019-13675"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13675",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13675"
},
{
"cve": "CVE-2019-13676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13676"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13676",
"url": "https://www.suse.com/security/cve/CVE-2019-13676"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13676",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13676"
},
{
"cve": "CVE-2019-13677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13677"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in site isolation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13677",
"url": "https://www.suse.com/security/cve/CVE-2019-13677"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13677",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13677"
},
{
"cve": "CVE-2019-13678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13678"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13678",
"url": "https://www.suse.com/security/cve/CVE-2019-13678"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13678",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13678"
},
{
"cve": "CVE-2019-13679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13679"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13679",
"url": "https://www.suse.com/security/cve/CVE-2019-13679"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13679",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13679"
},
{
"cve": "CVE-2019-13680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13680"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites via crafted TLS connections.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13680",
"url": "https://www.suse.com/security/cve/CVE-2019-13680"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13680",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13680"
},
{
"cve": "CVE-2019-13681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13681"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass download restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13681",
"url": "https://www.suse.com/security/cve/CVE-2019-13681"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13681",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13681"
},
{
"cve": "CVE-2019-13682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13682"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in external protocol handling in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13682",
"url": "https://www.suse.com/security/cve/CVE-2019-13682"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13682",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13682"
},
{
"cve": "CVE-2019-13683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13683"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13683",
"url": "https://www.suse.com/security/cve/CVE-2019-13683"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-13683",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13683"
},
{
"cve": "CVE-2019-13685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13685"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in sharing view in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13685",
"url": "https://www.suse.com/security/cve/CVE-2019-13685"
},
{
"category": "external",
"summary": "SUSE Bug 1151229 for CVE-2019-13685",
"url": "https://bugzilla.suse.com/1151229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13685"
},
{
"cve": "CVE-2019-13686",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13686"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13686",
"url": "https://www.suse.com/security/cve/CVE-2019-13686"
},
{
"category": "external",
"summary": "SUSE Bug 1151229 for CVE-2019-13686",
"url": "https://bugzilla.suse.com/1151229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13686"
},
{
"cve": "CVE-2019-13687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13687"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13687",
"url": "https://www.suse.com/security/cve/CVE-2019-13687"
},
{
"category": "external",
"summary": "SUSE Bug 1151229 for CVE-2019-13687",
"url": "https://bugzilla.suse.com/1151229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13687"
},
{
"cve": "CVE-2019-13688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13688"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13688",
"url": "https://www.suse.com/security/cve/CVE-2019-13688"
},
{
"category": "external",
"summary": "SUSE Bug 1151229 for CVE-2019-13688",
"url": "https://bugzilla.suse.com/1151229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13688"
},
{
"cve": "CVE-2019-13693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13693"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13693",
"url": "https://www.suse.com/security/cve/CVE-2019-13693"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13693",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13693"
},
{
"cve": "CVE-2019-13694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13694"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13694",
"url": "https://www.suse.com/security/cve/CVE-2019-13694"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13694",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13694"
},
{
"cve": "CVE-2019-13695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13695"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13695",
"url": "https://www.suse.com/security/cve/CVE-2019-13695"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13695",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13695"
},
{
"cve": "CVE-2019-13696",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13696"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in JavaScript in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13696",
"url": "https://www.suse.com/security/cve/CVE-2019-13696"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13696",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13696"
},
{
"cve": "CVE-2019-13697",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13697"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13697",
"url": "https://www.suse.com/security/cve/CVE-2019-13697"
},
{
"category": "external",
"summary": "SUSE Bug 1153660 for CVE-2019-13697",
"url": "https://bugzilla.suse.com/1153660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13697"
},
{
"cve": "CVE-2019-13699",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13699"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13699",
"url": "https://www.suse.com/security/cve/CVE-2019-13699"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13699",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13699"
},
{
"cve": "CVE-2019-13700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13700"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13700",
"url": "https://www.suse.com/security/cve/CVE-2019-13700"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13700",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13700"
},
{
"cve": "CVE-2019-13701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13701"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13701",
"url": "https://www.suse.com/security/cve/CVE-2019-13701"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13701",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13701"
},
{
"cve": "CVE-2019-13702",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13702"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13702",
"url": "https://www.suse.com/security/cve/CVE-2019-13702"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13702",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13702"
},
{
"cve": "CVE-2019-13703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13703"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13703",
"url": "https://www.suse.com/security/cve/CVE-2019-13703"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13703",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13703"
},
{
"cve": "CVE-2019-13704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13704"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13704",
"url": "https://www.suse.com/security/cve/CVE-2019-13704"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13704",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13704"
},
{
"cve": "CVE-2019-13705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13705"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13705",
"url": "https://www.suse.com/security/cve/CVE-2019-13705"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13705",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13705"
},
{
"cve": "CVE-2019-13706",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13706"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13706",
"url": "https://www.suse.com/security/cve/CVE-2019-13706"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13706",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13706"
},
{
"cve": "CVE-2019-13707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13707"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13707",
"url": "https://www.suse.com/security/cve/CVE-2019-13707"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13707",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13707"
},
{
"cve": "CVE-2019-13708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13708"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13708",
"url": "https://www.suse.com/security/cve/CVE-2019-13708"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13708",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13708"
},
{
"cve": "CVE-2019-13709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13709"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13709",
"url": "https://www.suse.com/security/cve/CVE-2019-13709"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13709",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13709"
},
{
"cve": "CVE-2019-13710",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13710"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13710",
"url": "https://www.suse.com/security/cve/CVE-2019-13710"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13710",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13710"
},
{
"cve": "CVE-2019-13711",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13711"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13711",
"url": "https://www.suse.com/security/cve/CVE-2019-13711"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13711",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13711"
},
{
"cve": "CVE-2019-13713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13713"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13713",
"url": "https://www.suse.com/security/cve/CVE-2019-13713"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13713",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13713"
},
{
"cve": "CVE-2019-13714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13714"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13714",
"url": "https://www.suse.com/security/cve/CVE-2019-13714"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13714",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13714"
},
{
"cve": "CVE-2019-13715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13715"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13715",
"url": "https://www.suse.com/security/cve/CVE-2019-13715"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13715",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13715"
},
{
"cve": "CVE-2019-13716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13716"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13716",
"url": "https://www.suse.com/security/cve/CVE-2019-13716"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13716",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13716"
},
{
"cve": "CVE-2019-13717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13717"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13717",
"url": "https://www.suse.com/security/cve/CVE-2019-13717"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13717",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13717"
},
{
"cve": "CVE-2019-13718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13718"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13718",
"url": "https://www.suse.com/security/cve/CVE-2019-13718"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13718",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13718"
},
{
"cve": "CVE-2019-13719",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13719"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13719",
"url": "https://www.suse.com/security/cve/CVE-2019-13719"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-13719",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13719"
},
{
"cve": "CVE-2019-13720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13720"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13720",
"url": "https://www.suse.com/security/cve/CVE-2019-13720"
},
{
"category": "external",
"summary": "SUSE Bug 1155643 for CVE-2019-13720",
"url": "https://bugzilla.suse.com/1155643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13720"
},
{
"cve": "CVE-2019-13721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13721"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13721",
"url": "https://www.suse.com/security/cve/CVE-2019-13721"
},
{
"category": "external",
"summary": "SUSE Bug 1155643 for CVE-2019-13721",
"url": "https://bugzilla.suse.com/1155643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13721"
},
{
"cve": "CVE-2019-13723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13723"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13723",
"url": "https://www.suse.com/security/cve/CVE-2019-13723"
},
{
"category": "external",
"summary": "SUSE Bug 1157269 for CVE-2019-13723",
"url": "https://bugzilla.suse.com/1157269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13723"
},
{
"cve": "CVE-2019-13724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13724"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13724",
"url": "https://www.suse.com/security/cve/CVE-2019-13724"
},
{
"category": "external",
"summary": "SUSE Bug 1157269 for CVE-2019-13724",
"url": "https://bugzilla.suse.com/1157269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13724"
},
{
"cve": "CVE-2019-13725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13725"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13725",
"url": "https://www.suse.com/security/cve/CVE-2019-13725"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13725",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13725"
},
{
"cve": "CVE-2019-13726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13726"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13726",
"url": "https://www.suse.com/security/cve/CVE-2019-13726"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13726",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13726"
},
{
"cve": "CVE-2019-13727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13727"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13727",
"url": "https://www.suse.com/security/cve/CVE-2019-13727"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13727",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13727"
},
{
"cve": "CVE-2019-13728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13728"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13728",
"url": "https://www.suse.com/security/cve/CVE-2019-13728"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13728",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13728"
},
{
"cve": "CVE-2019-13729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13729"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13729",
"url": "https://www.suse.com/security/cve/CVE-2019-13729"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13729",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13729"
},
{
"cve": "CVE-2019-13730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13730"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13730",
"url": "https://www.suse.com/security/cve/CVE-2019-13730"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13730",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13730"
},
{
"cve": "CVE-2019-13732",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13732"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13732",
"url": "https://www.suse.com/security/cve/CVE-2019-13732"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13732",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13732"
},
{
"cve": "CVE-2019-13734",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13734"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13734",
"url": "https://www.suse.com/security/cve/CVE-2019-13734"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13734",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13734"
},
{
"cve": "CVE-2019-13735",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13735"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13735",
"url": "https://www.suse.com/security/cve/CVE-2019-13735"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13735",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13735"
},
{
"cve": "CVE-2019-13736",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13736"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13736",
"url": "https://www.suse.com/security/cve/CVE-2019-13736"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13736",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13736"
},
{
"cve": "CVE-2019-13737",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13737"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in autocomplete in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13737",
"url": "https://www.suse.com/security/cve/CVE-2019-13737"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13737",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13737"
},
{
"cve": "CVE-2019-13738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13738"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13738",
"url": "https://www.suse.com/security/cve/CVE-2019-13738"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13738",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13738"
},
{
"cve": "CVE-2019-13739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13739"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13739",
"url": "https://www.suse.com/security/cve/CVE-2019-13739"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13739",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13739"
},
{
"cve": "CVE-2019-13740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13740"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13740",
"url": "https://www.suse.com/security/cve/CVE-2019-13740"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13740",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13740"
},
{
"cve": "CVE-2019-13741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13741"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13741",
"url": "https://www.suse.com/security/cve/CVE-2019-13741"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13741",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13741"
},
{
"cve": "CVE-2019-13742",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13742"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13742",
"url": "https://www.suse.com/security/cve/CVE-2019-13742"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13742",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13742"
},
{
"cve": "CVE-2019-13743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13743"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13743",
"url": "https://www.suse.com/security/cve/CVE-2019-13743"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13743",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13743"
},
{
"cve": "CVE-2019-13744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13744"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13744",
"url": "https://www.suse.com/security/cve/CVE-2019-13744"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13744",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13744"
},
{
"cve": "CVE-2019-13745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13745"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13745",
"url": "https://www.suse.com/security/cve/CVE-2019-13745"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13745",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13745"
},
{
"cve": "CVE-2019-13746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13746"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13746",
"url": "https://www.suse.com/security/cve/CVE-2019-13746"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13746",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13746"
},
{
"cve": "CVE-2019-13747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13747"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13747",
"url": "https://www.suse.com/security/cve/CVE-2019-13747"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13747",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13747"
},
{
"cve": "CVE-2019-13748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13748"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13748",
"url": "https://www.suse.com/security/cve/CVE-2019-13748"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13748",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13748"
},
{
"cve": "CVE-2019-13749",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13749"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13749",
"url": "https://www.suse.com/security/cve/CVE-2019-13749"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13749",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13749"
},
{
"cve": "CVE-2019-13750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13750"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13750",
"url": "https://www.suse.com/security/cve/CVE-2019-13750"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13750",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13750"
},
{
"cve": "CVE-2019-13751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13751"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13751",
"url": "https://www.suse.com/security/cve/CVE-2019-13751"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13751",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13751"
},
{
"cve": "CVE-2019-13752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13752"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13752",
"url": "https://www.suse.com/security/cve/CVE-2019-13752"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13752",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13752"
},
{
"cve": "CVE-2019-13753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13753"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13753",
"url": "https://www.suse.com/security/cve/CVE-2019-13753"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13753",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13753"
},
{
"cve": "CVE-2019-13754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13754"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13754",
"url": "https://www.suse.com/security/cve/CVE-2019-13754"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13754",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13754"
},
{
"cve": "CVE-2019-13755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13755"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13755",
"url": "https://www.suse.com/security/cve/CVE-2019-13755"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13755",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13755"
},
{
"cve": "CVE-2019-13756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13756"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13756",
"url": "https://www.suse.com/security/cve/CVE-2019-13756"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13756",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13756"
},
{
"cve": "CVE-2019-13757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13757"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13757",
"url": "https://www.suse.com/security/cve/CVE-2019-13757"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13757",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13757"
},
{
"cve": "CVE-2019-13758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13758"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13758",
"url": "https://www.suse.com/security/cve/CVE-2019-13758"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13758",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13758"
},
{
"cve": "CVE-2019-13759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13759"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13759",
"url": "https://www.suse.com/security/cve/CVE-2019-13759"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13759",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13759"
},
{
"cve": "CVE-2019-13761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13761"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13761",
"url": "https://www.suse.com/security/cve/CVE-2019-13761"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13761",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13761"
},
{
"cve": "CVE-2019-13762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13762"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13762",
"url": "https://www.suse.com/security/cve/CVE-2019-13762"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13762",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13762"
},
{
"cve": "CVE-2019-13763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13763"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13763",
"url": "https://www.suse.com/security/cve/CVE-2019-13763"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13763",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13763"
},
{
"cve": "CVE-2019-13764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13764"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13764",
"url": "https://www.suse.com/security/cve/CVE-2019-13764"
},
{
"category": "external",
"summary": "SUSE Bug 1158982 for CVE-2019-13764",
"url": "https://bugzilla.suse.com/1158982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13764"
},
{
"cve": "CVE-2019-13767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13767"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13767",
"url": "https://www.suse.com/security/cve/CVE-2019-13767"
},
{
"category": "external",
"summary": "SUSE Bug 1159498 for CVE-2019-13767",
"url": "https://bugzilla.suse.com/1159498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-13767"
},
{
"cve": "CVE-2019-15903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15903"
}
],
"notes": [
{
"category": "general",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15903",
"url": "https://www.suse.com/security/cve/CVE-2019-15903"
},
{
"category": "external",
"summary": "SUSE Bug 1149429 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1149429"
},
{
"category": "external",
"summary": "SUSE Bug 1154738 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1154738"
},
{
"category": "external",
"summary": "SUSE Bug 1154806 for CVE-2019-15903",
"url": "https://bugzilla.suse.com/1154806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-15903"
},
{
"cve": "CVE-2019-18197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18197"
}
],
"notes": [
{
"category": "general",
"text": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18197",
"url": "https://www.suse.com/security/cve/CVE-2019-18197"
},
{
"category": "external",
"summary": "SUSE Bug 1154609 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1154609"
},
{
"category": "external",
"summary": "SUSE Bug 1157028 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1157028"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1162833"
},
{
"category": "external",
"summary": "SUSE Bug 1169511 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1169511"
},
{
"category": "external",
"summary": "SUSE Bug 1190108 for CVE-2019-18197",
"url": "https://bugzilla.suse.com/1190108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-18197"
},
{
"cve": "CVE-2019-19880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19880"
}
],
"notes": [
{
"category": "general",
"text": "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19880",
"url": "https://www.suse.com/security/cve/CVE-2019-19880"
},
{
"category": "external",
"summary": "SUSE Bug 1159491 for CVE-2019-19880",
"url": "https://bugzilla.suse.com/1159491"
},
{
"category": "external",
"summary": "SUSE Bug 1159715 for CVE-2019-19880",
"url": "https://bugzilla.suse.com/1159715"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2019-19880",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-19880"
},
{
"cve": "CVE-2019-19923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19923"
}
],
"notes": [
{
"category": "general",
"text": "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19923",
"url": "https://www.suse.com/security/cve/CVE-2019-19923"
},
{
"category": "external",
"summary": "SUSE Bug 1160309 for CVE-2019-19923",
"url": "https://bugzilla.suse.com/1160309"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2019-19923",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-19923"
},
{
"cve": "CVE-2019-19926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19926"
}
],
"notes": [
{
"category": "general",
"text": "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19926",
"url": "https://www.suse.com/security/cve/CVE-2019-19926"
},
{
"category": "external",
"summary": "SUSE Bug 1159491 for CVE-2019-19926",
"url": "https://bugzilla.suse.com/1159491"
},
{
"category": "external",
"summary": "SUSE Bug 1159715 for CVE-2019-19926",
"url": "https://bugzilla.suse.com/1159715"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2019-19926",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-19926"
},
{
"cve": "CVE-2019-20503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20503"
}
],
"notes": [
{
"category": "general",
"text": "usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20503",
"url": "https://www.suse.com/security/cve/CVE-2019-20503"
},
{
"category": "external",
"summary": "SUSE Bug 1166238 for CVE-2019-20503",
"url": "https://bugzilla.suse.com/1166238"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2019-20503",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-20503"
},
{
"cve": "CVE-2019-5754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5754"
}
],
"notes": [
{
"category": "general",
"text": "Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5754",
"url": "https://www.suse.com/security/cve/CVE-2019-5754"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5754",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5754"
},
{
"cve": "CVE-2019-5755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5755"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5755",
"url": "https://www.suse.com/security/cve/CVE-2019-5755"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5755",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5755"
},
{
"cve": "CVE-2019-5756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5756"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5756",
"url": "https://www.suse.com/security/cve/CVE-2019-5756"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5756",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5756"
},
{
"cve": "CVE-2019-5757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5757"
}
],
"notes": [
{
"category": "general",
"text": "An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5757",
"url": "https://www.suse.com/security/cve/CVE-2019-5757"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5757",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5757"
},
{
"cve": "CVE-2019-5758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5758"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5758",
"url": "https://www.suse.com/security/cve/CVE-2019-5758"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5758",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5758"
},
{
"cve": "CVE-2019-5759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5759"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5759",
"url": "https://www.suse.com/security/cve/CVE-2019-5759"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5759",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5759"
},
{
"cve": "CVE-2019-5760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5760"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5760",
"url": "https://www.suse.com/security/cve/CVE-2019-5760"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5760",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5760"
},
{
"cve": "CVE-2019-5761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5761"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5761",
"url": "https://www.suse.com/security/cve/CVE-2019-5761"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5761",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5761"
},
{
"cve": "CVE-2019-5762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5762"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5762",
"url": "https://www.suse.com/security/cve/CVE-2019-5762"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5762",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5762"
},
{
"cve": "CVE-2019-5763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5763"
}
],
"notes": [
{
"category": "general",
"text": "Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5763",
"url": "https://www.suse.com/security/cve/CVE-2019-5763"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5763",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5763"
},
{
"cve": "CVE-2019-5764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5764"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5764",
"url": "https://www.suse.com/security/cve/CVE-2019-5764"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5764",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5764"
},
{
"cve": "CVE-2019-5765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5765"
}
],
"notes": [
{
"category": "general",
"text": "An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5765",
"url": "https://www.suse.com/security/cve/CVE-2019-5765"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5765",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5765"
},
{
"cve": "CVE-2019-5766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5766"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5766",
"url": "https://www.suse.com/security/cve/CVE-2019-5766"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5766",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5766"
},
{
"cve": "CVE-2019-5767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5767"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5767",
"url": "https://www.suse.com/security/cve/CVE-2019-5767"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5767",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5767"
},
{
"cve": "CVE-2019-5768",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5768"
}
],
"notes": [
{
"category": "general",
"text": "DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5768",
"url": "https://www.suse.com/security/cve/CVE-2019-5768"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5768",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5768"
},
{
"cve": "CVE-2019-5769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5769"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5769",
"url": "https://www.suse.com/security/cve/CVE-2019-5769"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5769",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5769"
},
{
"cve": "CVE-2019-5770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5770"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5770",
"url": "https://www.suse.com/security/cve/CVE-2019-5770"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5770",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5770"
},
{
"cve": "CVE-2019-5771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5771"
}
],
"notes": [
{
"category": "general",
"text": "An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5771",
"url": "https://www.suse.com/security/cve/CVE-2019-5771"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5771",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5771"
},
{
"cve": "CVE-2019-5772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5772"
}
],
"notes": [
{
"category": "general",
"text": "Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5772",
"url": "https://www.suse.com/security/cve/CVE-2019-5772"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5772",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5772"
},
{
"cve": "CVE-2019-5773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5773"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5773",
"url": "https://www.suse.com/security/cve/CVE-2019-5773"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5773",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5773"
},
{
"cve": "CVE-2019-5774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5774"
}
],
"notes": [
{
"category": "general",
"text": "Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5774",
"url": "https://www.suse.com/security/cve/CVE-2019-5774"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5774",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5774"
},
{
"cve": "CVE-2019-5775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5775"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5775",
"url": "https://www.suse.com/security/cve/CVE-2019-5775"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5775",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5775"
},
{
"cve": "CVE-2019-5776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5776"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5776",
"url": "https://www.suse.com/security/cve/CVE-2019-5776"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5776",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5776"
},
{
"cve": "CVE-2019-5777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5777"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5777",
"url": "https://www.suse.com/security/cve/CVE-2019-5777"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5777",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5777"
},
{
"cve": "CVE-2019-5778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5778"
}
],
"notes": [
{
"category": "general",
"text": "A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5778",
"url": "https://www.suse.com/security/cve/CVE-2019-5778"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5778",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5778"
},
{
"cve": "CVE-2019-5779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5779"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5779",
"url": "https://www.suse.com/security/cve/CVE-2019-5779"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5779",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5779"
},
{
"cve": "CVE-2019-5780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5780"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5780",
"url": "https://www.suse.com/security/cve/CVE-2019-5780"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5780",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5780"
},
{
"cve": "CVE-2019-5781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5781"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5781",
"url": "https://www.suse.com/security/cve/CVE-2019-5781"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5781",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5781"
},
{
"cve": "CVE-2019-5782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5782"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5782",
"url": "https://www.suse.com/security/cve/CVE-2019-5782"
},
{
"category": "external",
"summary": "SUSE Bug 1123641 for CVE-2019-5782",
"url": "https://bugzilla.suse.com/1123641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5782"
},
{
"cve": "CVE-2019-5784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5784"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5784",
"url": "https://www.suse.com/security/cve/CVE-2019-5784"
},
{
"category": "external",
"summary": "SUSE Bug 1124936 for CVE-2019-5784",
"url": "https://bugzilla.suse.com/1124936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5784"
},
{
"cve": "CVE-2019-5786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5786"
}
],
"notes": [
{
"category": "general",
"text": "Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5786",
"url": "https://www.suse.com/security/cve/CVE-2019-5786"
},
{
"category": "external",
"summary": "SUSE Bug 1127602 for CVE-2019-5786",
"url": "https://bugzilla.suse.com/1127602"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5786"
},
{
"cve": "CVE-2019-5787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5787"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5787",
"url": "https://www.suse.com/security/cve/CVE-2019-5787"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5787",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5787"
},
{
"cve": "CVE-2019-5788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5788"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5788",
"url": "https://www.suse.com/security/cve/CVE-2019-5788"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5788",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5788"
},
{
"cve": "CVE-2019-5789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5789"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5789",
"url": "https://www.suse.com/security/cve/CVE-2019-5789"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5789",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5789"
},
{
"cve": "CVE-2019-5790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5790"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5790",
"url": "https://www.suse.com/security/cve/CVE-2019-5790"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5790",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5790"
},
{
"cve": "CVE-2019-5791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5791"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5791",
"url": "https://www.suse.com/security/cve/CVE-2019-5791"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5791",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5791"
},
{
"cve": "CVE-2019-5792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5792"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5792",
"url": "https://www.suse.com/security/cve/CVE-2019-5792"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5792",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5792"
},
{
"cve": "CVE-2019-5793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5793"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5793",
"url": "https://www.suse.com/security/cve/CVE-2019-5793"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5793",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5793"
},
{
"cve": "CVE-2019-5794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5794"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5794",
"url": "https://www.suse.com/security/cve/CVE-2019-5794"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5794",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5794"
},
{
"cve": "CVE-2019-5795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5795"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5795",
"url": "https://www.suse.com/security/cve/CVE-2019-5795"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5795",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5795"
},
{
"cve": "CVE-2019-5796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5796"
}
],
"notes": [
{
"category": "general",
"text": "Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5796",
"url": "https://www.suse.com/security/cve/CVE-2019-5796"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5796",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5796"
},
{
"cve": "CVE-2019-5797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5797"
}
],
"notes": [
{
"category": "general",
"text": "Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5797",
"url": "https://www.suse.com/security/cve/CVE-2019-5797"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5797",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5797"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-5799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5799"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect inheritance of a new document\u0027s policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5799",
"url": "https://www.suse.com/security/cve/CVE-2019-5799"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5799",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5799"
},
{
"cve": "CVE-2019-5800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5800"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5800",
"url": "https://www.suse.com/security/cve/CVE-2019-5800"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5800",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5800"
},
{
"cve": "CVE-2019-5801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5801"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5801",
"url": "https://www.suse.com/security/cve/CVE-2019-5801"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5801",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5801"
},
{
"cve": "CVE-2019-5802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5802"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5802",
"url": "https://www.suse.com/security/cve/CVE-2019-5802"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5802",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5802"
},
{
"cve": "CVE-2019-5803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5803"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5803",
"url": "https://www.suse.com/security/cve/CVE-2019-5803"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5803",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5803"
},
{
"cve": "CVE-2019-5804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5804"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5804",
"url": "https://www.suse.com/security/cve/CVE-2019-5804"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5804",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5804"
},
{
"cve": "CVE-2019-5805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5805"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5805",
"url": "https://www.suse.com/security/cve/CVE-2019-5805"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5805",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5805"
},
{
"cve": "CVE-2019-5806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5806"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5806",
"url": "https://www.suse.com/security/cve/CVE-2019-5806"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5806",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5806"
},
{
"cve": "CVE-2019-5807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5807"
}
],
"notes": [
{
"category": "general",
"text": "Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5807",
"url": "https://www.suse.com/security/cve/CVE-2019-5807"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5807",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5807"
},
{
"cve": "CVE-2019-5808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5808"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5808",
"url": "https://www.suse.com/security/cve/CVE-2019-5808"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5808",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5808"
},
{
"cve": "CVE-2019-5809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5809"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5809",
"url": "https://www.suse.com/security/cve/CVE-2019-5809"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5809",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5809"
},
{
"cve": "CVE-2019-5810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5810"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5810",
"url": "https://www.suse.com/security/cve/CVE-2019-5810"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5810",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5810"
},
{
"cve": "CVE-2019-5811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5811"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5811",
"url": "https://www.suse.com/security/cve/CVE-2019-5811"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5811",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5811"
},
{
"cve": "CVE-2019-5812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5812"
}
],
"notes": [
{
"category": "general",
"text": "Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5812",
"url": "https://www.suse.com/security/cve/CVE-2019-5812"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5812",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5812"
},
{
"cve": "CVE-2019-5813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5813"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5813",
"url": "https://www.suse.com/security/cve/CVE-2019-5813"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5813",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5813"
},
{
"cve": "CVE-2019-5814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5814"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5814",
"url": "https://www.suse.com/security/cve/CVE-2019-5814"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5814",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5814"
},
{
"cve": "CVE-2019-5815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5815"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5815",
"url": "https://www.suse.com/security/cve/CVE-2019-5815"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5815",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5815"
},
{
"cve": "CVE-2019-5816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5816"
}
],
"notes": [
{
"category": "general",
"text": "Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5816",
"url": "https://www.suse.com/security/cve/CVE-2019-5816"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5816",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5816"
},
{
"cve": "CVE-2019-5817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5817"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5817",
"url": "https://www.suse.com/security/cve/CVE-2019-5817"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5817",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5817"
},
{
"cve": "CVE-2019-5818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5818"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5818",
"url": "https://www.suse.com/security/cve/CVE-2019-5818"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5818",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5818"
},
{
"cve": "CVE-2019-5819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5819"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to clipboard.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5819",
"url": "https://www.suse.com/security/cve/CVE-2019-5819"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5819",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5819"
},
{
"cve": "CVE-2019-5820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5820"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5820",
"url": "https://www.suse.com/security/cve/CVE-2019-5820"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5820",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5820"
},
{
"cve": "CVE-2019-5821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5821"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5821",
"url": "https://www.suse.com/security/cve/CVE-2019-5821"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5821",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5821"
},
{
"cve": "CVE-2019-5822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5822"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5822",
"url": "https://www.suse.com/security/cve/CVE-2019-5822"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5822",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5822"
},
{
"cve": "CVE-2019-5823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5823"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5823",
"url": "https://www.suse.com/security/cve/CVE-2019-5823"
},
{
"category": "external",
"summary": "SUSE Bug 1133313 for CVE-2019-5823",
"url": "https://bugzilla.suse.com/1133313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5823"
},
{
"cve": "CVE-2019-5824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5824"
}
],
"notes": [
{
"category": "general",
"text": "Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5824",
"url": "https://www.suse.com/security/cve/CVE-2019-5824"
},
{
"category": "external",
"summary": "SUSE Bug 1134218 for CVE-2019-5824",
"url": "https://bugzilla.suse.com/1134218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5824"
},
{
"cve": "CVE-2019-5827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5827"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5827",
"url": "https://www.suse.com/security/cve/CVE-2019-5827"
},
{
"category": "external",
"summary": "SUSE Bug 1134218 for CVE-2019-5827",
"url": "https://bugzilla.suse.com/1134218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5827"
},
{
"cve": "CVE-2019-5828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5828"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5828",
"url": "https://www.suse.com/security/cve/CVE-2019-5828"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5828",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5828"
},
{
"cve": "CVE-2019-5829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5829"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5829",
"url": "https://www.suse.com/security/cve/CVE-2019-5829"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5829",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5829"
},
{
"cve": "CVE-2019-5830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5830"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5830",
"url": "https://www.suse.com/security/cve/CVE-2019-5830"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5830",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5830"
},
{
"cve": "CVE-2019-5831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5831"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5831",
"url": "https://www.suse.com/security/cve/CVE-2019-5831"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5831",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5831"
},
{
"cve": "CVE-2019-5832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5832"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5832",
"url": "https://www.suse.com/security/cve/CVE-2019-5832"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5832",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5832"
},
{
"cve": "CVE-2019-5833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5833"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5833",
"url": "https://www.suse.com/security/cve/CVE-2019-5833"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5833",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5833"
},
{
"cve": "CVE-2019-5834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5834"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5834",
"url": "https://www.suse.com/security/cve/CVE-2019-5834"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5834",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5834"
},
{
"cve": "CVE-2019-5835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5835"
}
],
"notes": [
{
"category": "general",
"text": "Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5835",
"url": "https://www.suse.com/security/cve/CVE-2019-5835"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5835",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5835"
},
{
"cve": "CVE-2019-5836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5836"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5836",
"url": "https://www.suse.com/security/cve/CVE-2019-5836"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5836",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5836"
},
{
"cve": "CVE-2019-5837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5837"
}
],
"notes": [
{
"category": "general",
"text": "Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5837",
"url": "https://www.suse.com/security/cve/CVE-2019-5837"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5837",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5837"
},
{
"cve": "CVE-2019-5838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5838"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5838",
"url": "https://www.suse.com/security/cve/CVE-2019-5838"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5838",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5838"
},
{
"cve": "CVE-2019-5839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5839"
}
],
"notes": [
{
"category": "general",
"text": "Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5839",
"url": "https://www.suse.com/security/cve/CVE-2019-5839"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5839",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5839"
},
{
"cve": "CVE-2019-5840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5840"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5840",
"url": "https://www.suse.com/security/cve/CVE-2019-5840"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5840",
"url": "https://bugzilla.suse.com/1137332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5840"
},
{
"cve": "CVE-2019-5842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5842"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5842",
"url": "https://www.suse.com/security/cve/CVE-2019-5842"
},
{
"category": "external",
"summary": "SUSE Bug 1137332 for CVE-2019-5842",
"url": "https://bugzilla.suse.com/1137332"
},
{
"category": "external",
"summary": "SUSE Bug 1138287 for CVE-2019-5842",
"url": "https://bugzilla.suse.com/1138287"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5842"
},
{
"cve": "CVE-2019-5844",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5844"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5844",
"url": "https://www.suse.com/security/cve/CVE-2019-5844"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5844",
"url": "https://bugzilla.suse.com/1129059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5844"
},
{
"cve": "CVE-2019-5847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5847"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5847",
"url": "https://www.suse.com/security/cve/CVE-2019-5847"
},
{
"category": "external",
"summary": "SUSE Bug 1141649 for CVE-2019-5847",
"url": "https://bugzilla.suse.com/1141649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5847"
},
{
"cve": "CVE-2019-5848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5848"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5848",
"url": "https://www.suse.com/security/cve/CVE-2019-5848"
},
{
"category": "external",
"summary": "SUSE Bug 1141649 for CVE-2019-5848",
"url": "https://bugzilla.suse.com/1141649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5848"
},
{
"cve": "CVE-2019-5850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5850"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5850",
"url": "https://www.suse.com/security/cve/CVE-2019-5850"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5850",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5850"
},
{
"cve": "CVE-2019-5851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5851"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5851",
"url": "https://www.suse.com/security/cve/CVE-2019-5851"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5851",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5851"
},
{
"cve": "CVE-2019-5852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5852"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5852",
"url": "https://www.suse.com/security/cve/CVE-2019-5852"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5852",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5852"
},
{
"cve": "CVE-2019-5853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5853"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5853",
"url": "https://www.suse.com/security/cve/CVE-2019-5853"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5853",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5853"
},
{
"cve": "CVE-2019-5854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5854"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5854",
"url": "https://www.suse.com/security/cve/CVE-2019-5854"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5854",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5854"
},
{
"cve": "CVE-2019-5855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5855"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5855",
"url": "https://www.suse.com/security/cve/CVE-2019-5855"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5855",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5855"
},
{
"cve": "CVE-2019-5856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5856"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5856",
"url": "https://www.suse.com/security/cve/CVE-2019-5856"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5856",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5856"
},
{
"cve": "CVE-2019-5857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5857"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5857",
"url": "https://www.suse.com/security/cve/CVE-2019-5857"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5857",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5857"
},
{
"cve": "CVE-2019-5858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5858"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5858",
"url": "https://www.suse.com/security/cve/CVE-2019-5858"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5858",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5858"
},
{
"cve": "CVE-2019-5859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5859"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5859",
"url": "https://www.suse.com/security/cve/CVE-2019-5859"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5859",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5859"
},
{
"cve": "CVE-2019-5860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5860"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5860",
"url": "https://www.suse.com/security/cve/CVE-2019-5860"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5860",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5860"
},
{
"cve": "CVE-2019-5861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5861"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5861",
"url": "https://www.suse.com/security/cve/CVE-2019-5861"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5861",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5861"
},
{
"cve": "CVE-2019-5862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5862"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5862",
"url": "https://www.suse.com/security/cve/CVE-2019-5862"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5862",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5862"
},
{
"cve": "CVE-2019-5863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5863"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5863",
"url": "https://www.suse.com/security/cve/CVE-2019-5863"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5863",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5863"
},
{
"cve": "CVE-2019-5864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5864"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5864",
"url": "https://www.suse.com/security/cve/CVE-2019-5864"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5864",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5864"
},
{
"cve": "CVE-2019-5865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5865"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5865",
"url": "https://www.suse.com/security/cve/CVE-2019-5865"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5865",
"url": "https://bugzilla.suse.com/1143492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5865"
},
{
"cve": "CVE-2019-5867",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5867"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5867",
"url": "https://www.suse.com/security/cve/CVE-2019-5867"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5867",
"url": "https://bugzilla.suse.com/1143492"
},
{
"category": "external",
"summary": "SUSE Bug 1145242 for CVE-2019-5867",
"url": "https://bugzilla.suse.com/1145242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5867"
},
{
"cve": "CVE-2019-5868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5868"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5868",
"url": "https://www.suse.com/security/cve/CVE-2019-5868"
},
{
"category": "external",
"summary": "SUSE Bug 1143492 for CVE-2019-5868",
"url": "https://bugzilla.suse.com/1143492"
},
{
"category": "external",
"summary": "SUSE Bug 1145242 for CVE-2019-5868",
"url": "https://bugzilla.suse.com/1145242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5868"
},
{
"cve": "CVE-2019-5869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5869"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 76.0.3809.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5869",
"url": "https://www.suse.com/security/cve/CVE-2019-5869"
},
{
"category": "external",
"summary": "SUSE Bug 1149143 for CVE-2019-5869",
"url": "https://bugzilla.suse.com/1149143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5869"
},
{
"cve": "CVE-2019-5870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5870"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5870",
"url": "https://www.suse.com/security/cve/CVE-2019-5870"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5870",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-5870"
},
{
"cve": "CVE-2019-5871",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5871"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5871",
"url": "https://www.suse.com/security/cve/CVE-2019-5871"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5871",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5871"
},
{
"cve": "CVE-2019-5872",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5872"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5872",
"url": "https://www.suse.com/security/cve/CVE-2019-5872"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5872",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5872"
},
{
"cve": "CVE-2019-5874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5874"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5874",
"url": "https://www.suse.com/security/cve/CVE-2019-5874"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5874",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5874"
},
{
"cve": "CVE-2019-5875",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5875"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5875",
"url": "https://www.suse.com/security/cve/CVE-2019-5875"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5875",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5875"
},
{
"cve": "CVE-2019-5876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5876"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5876",
"url": "https://www.suse.com/security/cve/CVE-2019-5876"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5876",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5876"
},
{
"cve": "CVE-2019-5877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5877"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5877",
"url": "https://www.suse.com/security/cve/CVE-2019-5877"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5877",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5877"
},
{
"cve": "CVE-2019-5878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5878"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5878",
"url": "https://www.suse.com/security/cve/CVE-2019-5878"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5878",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5878"
},
{
"cve": "CVE-2019-5879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5879"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5879",
"url": "https://www.suse.com/security/cve/CVE-2019-5879"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5879",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5879"
},
{
"cve": "CVE-2019-5880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5880"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5880",
"url": "https://www.suse.com/security/cve/CVE-2019-5880"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5880",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5880"
},
{
"cve": "CVE-2019-5881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5881"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in SwiftShader in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5881",
"url": "https://www.suse.com/security/cve/CVE-2019-5881"
},
{
"category": "external",
"summary": "SUSE Bug 1150425 for CVE-2019-5881",
"url": "https://bugzilla.suse.com/1150425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5881"
},
{
"cve": "CVE-2019-8075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-8075"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-8075",
"url": "https://www.suse.com/security/cve/CVE-2019-8075"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2019-8075",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-8075"
},
{
"cve": "CVE-2020-0561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-0561"
}
],
"notes": [
{
"category": "general",
"text": "Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-0561",
"url": "https://www.suse.com/security/cve/CVE-2020-0561"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-0561"
},
{
"cve": "CVE-2020-15959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15959"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15959",
"url": "https://www.suse.com/security/cve/CVE-2020-15959"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-15959",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15959"
},
{
"cve": "CVE-2020-15960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15960"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15960",
"url": "https://www.suse.com/security/cve/CVE-2020-15960"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15960",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15960",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15960"
},
{
"cve": "CVE-2020-15961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15961"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15961",
"url": "https://www.suse.com/security/cve/CVE-2020-15961"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15961",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15961",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15961"
},
{
"cve": "CVE-2020-15962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15962"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15962",
"url": "https://www.suse.com/security/cve/CVE-2020-15962"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15962",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15962",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15962"
},
{
"cve": "CVE-2020-15963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15963"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15963",
"url": "https://www.suse.com/security/cve/CVE-2020-15963"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15963",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15963",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15963"
},
{
"cve": "CVE-2020-15964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15964"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15964",
"url": "https://www.suse.com/security/cve/CVE-2020-15964"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15964",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15964",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15964"
},
{
"cve": "CVE-2020-15965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15965"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15965",
"url": "https://www.suse.com/security/cve/CVE-2020-15965"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15965",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15965",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15965"
},
{
"cve": "CVE-2020-15966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15966"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15966",
"url": "https://www.suse.com/security/cve/CVE-2020-15966"
},
{
"category": "external",
"summary": "SUSE Bug 1176791 for CVE-2020-15966",
"url": "https://bugzilla.suse.com/1176791"
},
{
"category": "external",
"summary": "SUSE Bug 1176799 for CVE-2020-15966",
"url": "https://bugzilla.suse.com/1176799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-15966"
},
{
"cve": "CVE-2020-15967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15967"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15967",
"url": "https://www.suse.com/security/cve/CVE-2020-15967"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15967",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15967"
},
{
"cve": "CVE-2020-15968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15968"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15968",
"url": "https://www.suse.com/security/cve/CVE-2020-15968"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15968",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15968"
},
{
"cve": "CVE-2020-15969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15969"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15969",
"url": "https://www.suse.com/security/cve/CVE-2020-15969"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177408"
},
{
"category": "external",
"summary": "SUSE Bug 1177872 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177872"
},
{
"category": "external",
"summary": "SUSE Bug 1177977 for CVE-2020-15969",
"url": "https://bugzilla.suse.com/1177977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15969"
},
{
"cve": "CVE-2020-15970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15970"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15970",
"url": "https://www.suse.com/security/cve/CVE-2020-15970"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15970",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15970"
},
{
"cve": "CVE-2020-15971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15971"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15971",
"url": "https://www.suse.com/security/cve/CVE-2020-15971"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15971",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15971"
},
{
"cve": "CVE-2020-15972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15972"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15972",
"url": "https://www.suse.com/security/cve/CVE-2020-15972"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15972",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15972"
},
{
"cve": "CVE-2020-15973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15973"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15973",
"url": "https://www.suse.com/security/cve/CVE-2020-15973"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15973",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15973"
},
{
"cve": "CVE-2020-15974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15974"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15974",
"url": "https://www.suse.com/security/cve/CVE-2020-15974"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15974",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15974"
},
{
"cve": "CVE-2020-15975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15975"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15975",
"url": "https://www.suse.com/security/cve/CVE-2020-15975"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15975",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15975"
},
{
"cve": "CVE-2020-15976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15976"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15976",
"url": "https://www.suse.com/security/cve/CVE-2020-15976"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15976",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15976"
},
{
"cve": "CVE-2020-15977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15977"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15977",
"url": "https://www.suse.com/security/cve/CVE-2020-15977"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15977",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15977"
},
{
"cve": "CVE-2020-15978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15978"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15978",
"url": "https://www.suse.com/security/cve/CVE-2020-15978"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15978",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15978"
},
{
"cve": "CVE-2020-15979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15979"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15979",
"url": "https://www.suse.com/security/cve/CVE-2020-15979"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15979",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15979"
},
{
"cve": "CVE-2020-15980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15980"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15980",
"url": "https://www.suse.com/security/cve/CVE-2020-15980"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15980",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15980"
},
{
"cve": "CVE-2020-15981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15981"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15981",
"url": "https://www.suse.com/security/cve/CVE-2020-15981"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15981",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15981"
},
{
"cve": "CVE-2020-15982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15982"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15982",
"url": "https://www.suse.com/security/cve/CVE-2020-15982"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15982",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15982"
},
{
"cve": "CVE-2020-15983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15983"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15983",
"url": "https://www.suse.com/security/cve/CVE-2020-15983"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15983",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15983"
},
{
"cve": "CVE-2020-15984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15984"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15984",
"url": "https://www.suse.com/security/cve/CVE-2020-15984"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15984",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15984"
},
{
"cve": "CVE-2020-15985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15985"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15985",
"url": "https://www.suse.com/security/cve/CVE-2020-15985"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15985",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15985"
},
{
"cve": "CVE-2020-15986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15986"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15986",
"url": "https://www.suse.com/security/cve/CVE-2020-15986"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15986",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15986"
},
{
"cve": "CVE-2020-15987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15987"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15987",
"url": "https://www.suse.com/security/cve/CVE-2020-15987"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15987",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15987"
},
{
"cve": "CVE-2020-15988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15988"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15988",
"url": "https://www.suse.com/security/cve/CVE-2020-15988"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15988",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15988"
},
{
"cve": "CVE-2020-15989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15989"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15989",
"url": "https://www.suse.com/security/cve/CVE-2020-15989"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15989",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15989"
},
{
"cve": "CVE-2020-15990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15990"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15990",
"url": "https://www.suse.com/security/cve/CVE-2020-15990"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15990",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15990"
},
{
"cve": "CVE-2020-15991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15991"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15991",
"url": "https://www.suse.com/security/cve/CVE-2020-15991"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15991",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15991"
},
{
"cve": "CVE-2020-15992",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15992"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15992",
"url": "https://www.suse.com/security/cve/CVE-2020-15992"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-15992",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15992"
},
{
"cve": "CVE-2020-15995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15995"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15995",
"url": "https://www.suse.com/security/cve/CVE-2020-15995"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2020-15995",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15995"
},
{
"cve": "CVE-2020-15999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15999"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15999",
"url": "https://www.suse.com/security/cve/CVE-2020-15999"
},
{
"category": "external",
"summary": "SUSE Bug 1177914 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1177914"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1177936"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15999"
},
{
"cve": "CVE-2020-16000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16000"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16000",
"url": "https://www.suse.com/security/cve/CVE-2020-16000"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-16000",
"url": "https://bugzilla.suse.com/1177936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16000"
},
{
"cve": "CVE-2020-16001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16001"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16001",
"url": "https://www.suse.com/security/cve/CVE-2020-16001"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-16001",
"url": "https://bugzilla.suse.com/1177936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16001"
},
{
"cve": "CVE-2020-16002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16002"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16002",
"url": "https://www.suse.com/security/cve/CVE-2020-16002"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-16002",
"url": "https://bugzilla.suse.com/1177936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16002"
},
{
"cve": "CVE-2020-16003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16003"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16003",
"url": "https://www.suse.com/security/cve/CVE-2020-16003"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-16003",
"url": "https://bugzilla.suse.com/1177936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16003"
},
{
"cve": "CVE-2020-16004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16004"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16004",
"url": "https://www.suse.com/security/cve/CVE-2020-16004"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16004",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16004"
},
{
"cve": "CVE-2020-16005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16005"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16005",
"url": "https://www.suse.com/security/cve/CVE-2020-16005"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16005",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16005"
},
{
"cve": "CVE-2020-16006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16006"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16006",
"url": "https://www.suse.com/security/cve/CVE-2020-16006"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16006",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16006"
},
{
"cve": "CVE-2020-16007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16007"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16007",
"url": "https://www.suse.com/security/cve/CVE-2020-16007"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16007",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16007"
},
{
"cve": "CVE-2020-16008",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16008"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16008",
"url": "https://www.suse.com/security/cve/CVE-2020-16008"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16008",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16008"
},
{
"cve": "CVE-2020-16009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16009"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16009",
"url": "https://www.suse.com/security/cve/CVE-2020-16009"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16009",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16009"
},
{
"cve": "CVE-2020-16011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16011"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16011",
"url": "https://www.suse.com/security/cve/CVE-2020-16011"
},
{
"category": "external",
"summary": "SUSE Bug 1178375 for CVE-2020-16011",
"url": "https://bugzilla.suse.com/1178375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16011"
},
{
"cve": "CVE-2020-16012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16012"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16012",
"url": "https://www.suse.com/security/cve/CVE-2020-16012"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178894"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16012",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16012"
},
{
"cve": "CVE-2020-16013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16013"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16013",
"url": "https://www.suse.com/security/cve/CVE-2020-16013"
},
{
"category": "external",
"summary": "SUSE Bug 1178703 for CVE-2020-16013",
"url": "https://bugzilla.suse.com/1178703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16013"
},
{
"cve": "CVE-2020-16014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16014"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16014",
"url": "https://www.suse.com/security/cve/CVE-2020-16014"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16014",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16014"
},
{
"cve": "CVE-2020-16015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16015"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16015",
"url": "https://www.suse.com/security/cve/CVE-2020-16015"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16015",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16015"
},
{
"cve": "CVE-2020-16016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16016"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16016",
"url": "https://www.suse.com/security/cve/CVE-2020-16016"
},
{
"category": "external",
"summary": "SUSE Bug 1178630 for CVE-2020-16016",
"url": "https://bugzilla.suse.com/1178630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16016"
},
{
"cve": "CVE-2020-16017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16017"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16017",
"url": "https://www.suse.com/security/cve/CVE-2020-16017"
},
{
"category": "external",
"summary": "SUSE Bug 1178703 for CVE-2020-16017",
"url": "https://bugzilla.suse.com/1178703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16017"
},
{
"cve": "CVE-2020-16018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16018"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16018",
"url": "https://www.suse.com/security/cve/CVE-2020-16018"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16018",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16018"
},
{
"cve": "CVE-2020-16019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16019"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16019",
"url": "https://www.suse.com/security/cve/CVE-2020-16019"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16019",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16019"
},
{
"cve": "CVE-2020-16020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16020"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16020",
"url": "https://www.suse.com/security/cve/CVE-2020-16020"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16020",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16020"
},
{
"cve": "CVE-2020-16021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16021"
}
],
"notes": [
{
"category": "general",
"text": "Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16021",
"url": "https://www.suse.com/security/cve/CVE-2020-16021"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16021",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16021"
},
{
"cve": "CVE-2020-16022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16022"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16022",
"url": "https://www.suse.com/security/cve/CVE-2020-16022"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16022",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16022"
},
{
"cve": "CVE-2020-16023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16023"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16023",
"url": "https://www.suse.com/security/cve/CVE-2020-16023"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16023",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16023"
},
{
"cve": "CVE-2020-16024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16024"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16024",
"url": "https://www.suse.com/security/cve/CVE-2020-16024"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16024",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16024"
},
{
"cve": "CVE-2020-16025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16025"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16025",
"url": "https://www.suse.com/security/cve/CVE-2020-16025"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16025",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16025"
},
{
"cve": "CVE-2020-16026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16026"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16026",
"url": "https://www.suse.com/security/cve/CVE-2020-16026"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16026",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16026"
},
{
"cve": "CVE-2020-16027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16027"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user\u0027s disk via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16027",
"url": "https://www.suse.com/security/cve/CVE-2020-16027"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16027",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16027"
},
{
"cve": "CVE-2020-16028",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16028"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16028",
"url": "https://www.suse.com/security/cve/CVE-2020-16028"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16028",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16028"
},
{
"cve": "CVE-2020-16029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16029"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16029",
"url": "https://www.suse.com/security/cve/CVE-2020-16029"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16029",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16029"
},
{
"cve": "CVE-2020-16030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16030"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16030",
"url": "https://www.suse.com/security/cve/CVE-2020-16030"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16030",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16030"
},
{
"cve": "CVE-2020-16031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16031"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16031",
"url": "https://www.suse.com/security/cve/CVE-2020-16031"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16031",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16031"
},
{
"cve": "CVE-2020-16032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16032"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16032",
"url": "https://www.suse.com/security/cve/CVE-2020-16032"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16032",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16032"
},
{
"cve": "CVE-2020-16033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16033"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16033",
"url": "https://www.suse.com/security/cve/CVE-2020-16033"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16033",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16033"
},
{
"cve": "CVE-2020-16034",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16034"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass policy restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16034",
"url": "https://www.suse.com/security/cve/CVE-2020-16034"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16034",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16034"
},
{
"cve": "CVE-2020-16035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16035"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16035",
"url": "https://www.suse.com/security/cve/CVE-2020-16035"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16035",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16035"
},
{
"cve": "CVE-2020-16036",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16036"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass cookie restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16036",
"url": "https://www.suse.com/security/cve/CVE-2020-16036"
},
{
"category": "external",
"summary": "SUSE Bug 1178923 for CVE-2020-16036",
"url": "https://bugzilla.suse.com/1178923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-16036"
},
{
"cve": "CVE-2020-16037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16037"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16037",
"url": "https://www.suse.com/security/cve/CVE-2020-16037"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16037",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16037"
},
{
"cve": "CVE-2020-16038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16038"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16038",
"url": "https://www.suse.com/security/cve/CVE-2020-16038"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16038",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16038"
},
{
"cve": "CVE-2020-16039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16039"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16039",
"url": "https://www.suse.com/security/cve/CVE-2020-16039"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16039",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16039"
},
{
"cve": "CVE-2020-16040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16040"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16040",
"url": "https://www.suse.com/security/cve/CVE-2020-16040"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16040",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16040"
},
{
"cve": "CVE-2020-16041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16041"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16041",
"url": "https://www.suse.com/security/cve/CVE-2020-16041"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16041",
"url": "https://bugzilla.suse.com/1179576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16041"
},
{
"cve": "CVE-2020-16042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16042"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16042",
"url": "https://www.suse.com/security/cve/CVE-2020-16042"
},
{
"category": "external",
"summary": "SUSE Bug 1179576 for CVE-2020-16042",
"url": "https://bugzilla.suse.com/1179576"
},
{
"category": "external",
"summary": "SUSE Bug 1180039 for CVE-2020-16042",
"url": "https://bugzilla.suse.com/1180039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16042"
},
{
"cve": "CVE-2020-16043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16043"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16043",
"url": "https://www.suse.com/security/cve/CVE-2020-16043"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2020-16043",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-16043"
},
{
"cve": "CVE-2020-16044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16044"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16044",
"url": "https://www.suse.com/security/cve/CVE-2020-16044"
},
{
"category": "external",
"summary": "SUSE Bug 1180623 for CVE-2020-16044",
"url": "https://bugzilla.suse.com/1180623"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2020-16044",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-16044"
},
{
"cve": "CVE-2020-27844",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-27844"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in openjpeg\u0027s src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-27844",
"url": "https://www.suse.com/security/cve/CVE-2020-27844"
},
{
"category": "external",
"summary": "SUSE Bug 1180045 for CVE-2020-27844",
"url": "https://bugzilla.suse.com/1180045"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2020-27844",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2020-27844",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-27844"
},
{
"cve": "CVE-2020-6377",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6377"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6377",
"url": "https://www.suse.com/security/cve/CVE-2020-6377"
},
{
"category": "external",
"summary": "SUSE Bug 1160337 for CVE-2020-6377",
"url": "https://bugzilla.suse.com/1160337"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6377"
},
{
"cve": "CVE-2020-6378",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6378"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6378",
"url": "https://www.suse.com/security/cve/CVE-2020-6378"
},
{
"category": "external",
"summary": "SUSE Bug 1161252 for CVE-2020-6378",
"url": "https://bugzilla.suse.com/1161252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6378"
},
{
"cve": "CVE-2020-6379",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6379"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6379",
"url": "https://www.suse.com/security/cve/CVE-2020-6379"
},
{
"category": "external",
"summary": "SUSE Bug 1161252 for CVE-2020-6379",
"url": "https://bugzilla.suse.com/1161252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6379"
},
{
"cve": "CVE-2020-6380",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6380"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6380",
"url": "https://www.suse.com/security/cve/CVE-2020-6380"
},
{
"category": "external",
"summary": "SUSE Bug 1161252 for CVE-2020-6380",
"url": "https://bugzilla.suse.com/1161252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6380"
},
{
"cve": "CVE-2020-6381",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6381"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6381",
"url": "https://www.suse.com/security/cve/CVE-2020-6381"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6381",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6381"
},
{
"cve": "CVE-2020-6382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6382"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6382",
"url": "https://www.suse.com/security/cve/CVE-2020-6382"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6382",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6382"
},
{
"cve": "CVE-2020-6385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6385"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6385",
"url": "https://www.suse.com/security/cve/CVE-2020-6385"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6385",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6385"
},
{
"cve": "CVE-2020-6387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6387"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6387",
"url": "https://www.suse.com/security/cve/CVE-2020-6387"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6387",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6387"
},
{
"cve": "CVE-2020-6388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6388"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6388",
"url": "https://www.suse.com/security/cve/CVE-2020-6388"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6388",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6388"
},
{
"cve": "CVE-2020-6389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6389"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6389",
"url": "https://www.suse.com/security/cve/CVE-2020-6389"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6389",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6389"
},
{
"cve": "CVE-2020-6390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6390"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6390",
"url": "https://www.suse.com/security/cve/CVE-2020-6390"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6390",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6390"
},
{
"cve": "CVE-2020-6391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6391"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6391",
"url": "https://www.suse.com/security/cve/CVE-2020-6391"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6391",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6391"
},
{
"cve": "CVE-2020-6392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6392"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6392",
"url": "https://www.suse.com/security/cve/CVE-2020-6392"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6392",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6392"
},
{
"cve": "CVE-2020-6393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6393"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6393",
"url": "https://www.suse.com/security/cve/CVE-2020-6393"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6393",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6393"
},
{
"cve": "CVE-2020-6394",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6394"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6394",
"url": "https://www.suse.com/security/cve/CVE-2020-6394"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6394",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6394"
},
{
"cve": "CVE-2020-6395",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6395"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6395",
"url": "https://www.suse.com/security/cve/CVE-2020-6395"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6395",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6395"
},
{
"cve": "CVE-2020-6396",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6396"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6396",
"url": "https://www.suse.com/security/cve/CVE-2020-6396"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6396",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6396"
},
{
"cve": "CVE-2020-6397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6397"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6397",
"url": "https://www.suse.com/security/cve/CVE-2020-6397"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6397",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6397"
},
{
"cve": "CVE-2020-6398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6398"
}
],
"notes": [
{
"category": "general",
"text": "Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6398",
"url": "https://www.suse.com/security/cve/CVE-2020-6398"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6398",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6398"
},
{
"cve": "CVE-2020-6399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6399"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6399",
"url": "https://www.suse.com/security/cve/CVE-2020-6399"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6399",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6399"
},
{
"cve": "CVE-2020-6400",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6400"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6400",
"url": "https://www.suse.com/security/cve/CVE-2020-6400"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6400",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6400"
},
{
"cve": "CVE-2020-6401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6401"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6401",
"url": "https://www.suse.com/security/cve/CVE-2020-6401"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6401",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6401"
},
{
"cve": "CVE-2020-6402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6402"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6402",
"url": "https://www.suse.com/security/cve/CVE-2020-6402"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6402",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6402"
},
{
"cve": "CVE-2020-6403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6403"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6403",
"url": "https://www.suse.com/security/cve/CVE-2020-6403"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6403",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6403"
},
{
"cve": "CVE-2020-6404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6404"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6404",
"url": "https://www.suse.com/security/cve/CVE-2020-6404"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6404",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6404"
},
{
"cve": "CVE-2020-6405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6405"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6405",
"url": "https://www.suse.com/security/cve/CVE-2020-6405"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6405",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6405"
},
{
"cve": "CVE-2020-6406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6406"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6406",
"url": "https://www.suse.com/security/cve/CVE-2020-6406"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6406",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6406"
},
{
"cve": "CVE-2020-6407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6407"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6407",
"url": "https://www.suse.com/security/cve/CVE-2020-6407"
},
{
"category": "external",
"summary": "SUSE Bug 1164828 for CVE-2020-6407",
"url": "https://bugzilla.suse.com/1164828"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6407"
},
{
"cve": "CVE-2020-6408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6408"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6408",
"url": "https://www.suse.com/security/cve/CVE-2020-6408"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6408",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6408"
},
{
"cve": "CVE-2020-6409",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6409"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6409",
"url": "https://www.suse.com/security/cve/CVE-2020-6409"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6409",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6409"
},
{
"cve": "CVE-2020-6410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6410"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6410",
"url": "https://www.suse.com/security/cve/CVE-2020-6410"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6410",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6410"
},
{
"cve": "CVE-2020-6411",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6411"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6411",
"url": "https://www.suse.com/security/cve/CVE-2020-6411"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6411",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6411"
},
{
"cve": "CVE-2020-6412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6412"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6412",
"url": "https://www.suse.com/security/cve/CVE-2020-6412"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6412",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6412"
},
{
"cve": "CVE-2020-6413",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6413"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6413",
"url": "https://www.suse.com/security/cve/CVE-2020-6413"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6413",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6413"
},
{
"cve": "CVE-2020-6414",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6414"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6414",
"url": "https://www.suse.com/security/cve/CVE-2020-6414"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6414",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6414"
},
{
"cve": "CVE-2020-6415",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6415"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6415",
"url": "https://www.suse.com/security/cve/CVE-2020-6415"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6415",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6415"
},
{
"cve": "CVE-2020-6416",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6416"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6416",
"url": "https://www.suse.com/security/cve/CVE-2020-6416"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6416",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6416"
},
{
"cve": "CVE-2020-6417",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6417"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6417",
"url": "https://www.suse.com/security/cve/CVE-2020-6417"
},
{
"category": "external",
"summary": "SUSE Bug 1162833 for CVE-2020-6417",
"url": "https://bugzilla.suse.com/1162833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6417"
},
{
"cve": "CVE-2020-6418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6418"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6418",
"url": "https://www.suse.com/security/cve/CVE-2020-6418"
},
{
"category": "external",
"summary": "SUSE Bug 1164828 for CVE-2020-6418",
"url": "https://bugzilla.suse.com/1164828"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6418"
},
{
"cve": "CVE-2020-6420",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6420"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6420",
"url": "https://www.suse.com/security/cve/CVE-2020-6420"
},
{
"category": "external",
"summary": "SUSE Bug 1165826 for CVE-2020-6420",
"url": "https://bugzilla.suse.com/1165826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6420"
},
{
"cve": "CVE-2020-6422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6422"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6422",
"url": "https://www.suse.com/security/cve/CVE-2020-6422"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6422",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6422"
},
{
"cve": "CVE-2020-6423",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6423"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6423",
"url": "https://www.suse.com/security/cve/CVE-2020-6423"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6423",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6423"
},
{
"cve": "CVE-2020-6424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6424"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6424",
"url": "https://www.suse.com/security/cve/CVE-2020-6424"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6424",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6424"
},
{
"cve": "CVE-2020-6425",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6425"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6425",
"url": "https://www.suse.com/security/cve/CVE-2020-6425"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6425",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6425"
},
{
"cve": "CVE-2020-6426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6426"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6426",
"url": "https://www.suse.com/security/cve/CVE-2020-6426"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6426",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6426"
},
{
"cve": "CVE-2020-6427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6427"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6427",
"url": "https://www.suse.com/security/cve/CVE-2020-6427"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6427",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6427"
},
{
"cve": "CVE-2020-6428",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6428"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6428",
"url": "https://www.suse.com/security/cve/CVE-2020-6428"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6428",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6428"
},
{
"cve": "CVE-2020-6429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6429"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6429",
"url": "https://www.suse.com/security/cve/CVE-2020-6429"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6429",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6429"
},
{
"cve": "CVE-2020-6430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6430"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6430",
"url": "https://www.suse.com/security/cve/CVE-2020-6430"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6430",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6430"
},
{
"cve": "CVE-2020-6431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6431"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6431",
"url": "https://www.suse.com/security/cve/CVE-2020-6431"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6431",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6431"
},
{
"cve": "CVE-2020-6432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6432"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6432",
"url": "https://www.suse.com/security/cve/CVE-2020-6432"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6432",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6432"
},
{
"cve": "CVE-2020-6433",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6433"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6433",
"url": "https://www.suse.com/security/cve/CVE-2020-6433"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6433",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6433"
},
{
"cve": "CVE-2020-6434",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6434"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6434",
"url": "https://www.suse.com/security/cve/CVE-2020-6434"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6434",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6434"
},
{
"cve": "CVE-2020-6435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6435"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6435",
"url": "https://www.suse.com/security/cve/CVE-2020-6435"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6435",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6435"
},
{
"cve": "CVE-2020-6436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6436"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6436",
"url": "https://www.suse.com/security/cve/CVE-2020-6436"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6436",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6436"
},
{
"cve": "CVE-2020-6437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6437"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6437",
"url": "https://www.suse.com/security/cve/CVE-2020-6437"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6437",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6437"
},
{
"cve": "CVE-2020-6438",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6438"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6438",
"url": "https://www.suse.com/security/cve/CVE-2020-6438"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6438",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6438"
},
{
"cve": "CVE-2020-6439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6439"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6439",
"url": "https://www.suse.com/security/cve/CVE-2020-6439"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6439",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6439"
},
{
"cve": "CVE-2020-6440",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6440"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6440",
"url": "https://www.suse.com/security/cve/CVE-2020-6440"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6440",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6440"
},
{
"cve": "CVE-2020-6441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6441"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6441",
"url": "https://www.suse.com/security/cve/CVE-2020-6441"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6441",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6441"
},
{
"cve": "CVE-2020-6442",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6442"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6442",
"url": "https://www.suse.com/security/cve/CVE-2020-6442"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6442",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6442"
},
{
"cve": "CVE-2020-6443",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6443"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6443",
"url": "https://www.suse.com/security/cve/CVE-2020-6443"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6443",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6443"
},
{
"cve": "CVE-2020-6444",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6444"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6444",
"url": "https://www.suse.com/security/cve/CVE-2020-6444"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6444",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6444"
},
{
"cve": "CVE-2020-6445",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6445"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6445",
"url": "https://www.suse.com/security/cve/CVE-2020-6445"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6445",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6445"
},
{
"cve": "CVE-2020-6446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6446"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6446",
"url": "https://www.suse.com/security/cve/CVE-2020-6446"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6446",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6446"
},
{
"cve": "CVE-2020-6447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6447"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6447",
"url": "https://www.suse.com/security/cve/CVE-2020-6447"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6447",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6447"
},
{
"cve": "CVE-2020-6448",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6448"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6448",
"url": "https://www.suse.com/security/cve/CVE-2020-6448"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6448",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6448"
},
{
"cve": "CVE-2020-6449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6449"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6449",
"url": "https://www.suse.com/security/cve/CVE-2020-6449"
},
{
"category": "external",
"summary": "SUSE Bug 1167090 for CVE-2020-6449",
"url": "https://bugzilla.suse.com/1167090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6449"
},
{
"cve": "CVE-2020-6450",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6450"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6450",
"url": "https://www.suse.com/security/cve/CVE-2020-6450"
},
{
"category": "external",
"summary": "SUSE Bug 1168421 for CVE-2020-6450",
"url": "https://bugzilla.suse.com/1168421"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6450"
},
{
"cve": "CVE-2020-6451",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6451"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6451",
"url": "https://www.suse.com/security/cve/CVE-2020-6451"
},
{
"category": "external",
"summary": "SUSE Bug 1168421 for CVE-2020-6451",
"url": "https://bugzilla.suse.com/1168421"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6451"
},
{
"cve": "CVE-2020-6452",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6452"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6452",
"url": "https://www.suse.com/security/cve/CVE-2020-6452"
},
{
"category": "external",
"summary": "SUSE Bug 1168421 for CVE-2020-6452",
"url": "https://bugzilla.suse.com/1168421"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6452"
},
{
"cve": "CVE-2020-6454",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6454"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6454",
"url": "https://www.suse.com/security/cve/CVE-2020-6454"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6454",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6454"
},
{
"cve": "CVE-2020-6455",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6455"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6455",
"url": "https://www.suse.com/security/cve/CVE-2020-6455"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6455",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6455"
},
{
"cve": "CVE-2020-6456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6456"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolation via crafted clipboard contents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6456",
"url": "https://www.suse.com/security/cve/CVE-2020-6456"
},
{
"category": "external",
"summary": "SUSE Bug 1168911 for CVE-2020-6456",
"url": "https://bugzilla.suse.com/1168911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6456"
},
{
"cve": "CVE-2020-6457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6457"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6457",
"url": "https://www.suse.com/security/cve/CVE-2020-6457"
},
{
"category": "external",
"summary": "SUSE Bug 1169729 for CVE-2020-6457",
"url": "https://bugzilla.suse.com/1169729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6457"
},
{
"cve": "CVE-2020-6458",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6458"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6458",
"url": "https://www.suse.com/security/cve/CVE-2020-6458"
},
{
"category": "external",
"summary": "SUSE Bug 1170107 for CVE-2020-6458",
"url": "https://bugzilla.suse.com/1170107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6458"
},
{
"cve": "CVE-2020-6459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6459"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6459",
"url": "https://www.suse.com/security/cve/CVE-2020-6459"
},
{
"category": "external",
"summary": "SUSE Bug 1170107 for CVE-2020-6459",
"url": "https://bugzilla.suse.com/1170107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6459"
},
{
"cve": "CVE-2020-6460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6460"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6460",
"url": "https://www.suse.com/security/cve/CVE-2020-6460"
},
{
"category": "external",
"summary": "SUSE Bug 1170107 for CVE-2020-6460",
"url": "https://bugzilla.suse.com/1170107"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6460"
},
{
"cve": "CVE-2020-6462",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6462"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6462",
"url": "https://www.suse.com/security/cve/CVE-2020-6462"
},
{
"category": "external",
"summary": "SUSE Bug 1170707 for CVE-2020-6462",
"url": "https://bugzilla.suse.com/1170707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6462"
},
{
"cve": "CVE-2020-6463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6463"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6463",
"url": "https://www.suse.com/security/cve/CVE-2020-6463"
},
{
"category": "external",
"summary": "SUSE Bug 1171975 for CVE-2020-6463",
"url": "https://bugzilla.suse.com/1171975"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-6463",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6463"
},
{
"cve": "CVE-2020-6464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6464"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6464",
"url": "https://www.suse.com/security/cve/CVE-2020-6464"
},
{
"category": "external",
"summary": "SUSE Bug 1171247 for CVE-2020-6464",
"url": "https://bugzilla.suse.com/1171247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6464"
},
{
"cve": "CVE-2020-6465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6465"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6465",
"url": "https://www.suse.com/security/cve/CVE-2020-6465"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6465",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6465"
},
{
"cve": "CVE-2020-6466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6466"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6466",
"url": "https://www.suse.com/security/cve/CVE-2020-6466"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6466",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6466"
},
{
"cve": "CVE-2020-6467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6467"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6467",
"url": "https://www.suse.com/security/cve/CVE-2020-6467"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6467",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6467"
},
{
"cve": "CVE-2020-6468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6468"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6468",
"url": "https://www.suse.com/security/cve/CVE-2020-6468"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6468",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6468"
},
{
"cve": "CVE-2020-6469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6469"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6469",
"url": "https://www.suse.com/security/cve/CVE-2020-6469"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6469",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6469"
},
{
"cve": "CVE-2020-6470",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6470"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6470",
"url": "https://www.suse.com/security/cve/CVE-2020-6470"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6470",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6470"
},
{
"cve": "CVE-2020-6471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6471"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6471",
"url": "https://www.suse.com/security/cve/CVE-2020-6471"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6471",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6471"
},
{
"cve": "CVE-2020-6472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6472"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6472",
"url": "https://www.suse.com/security/cve/CVE-2020-6472"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6472",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6472"
},
{
"cve": "CVE-2020-6473",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6473"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6473",
"url": "https://www.suse.com/security/cve/CVE-2020-6473"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6473",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6473"
},
{
"cve": "CVE-2020-6474",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6474"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6474",
"url": "https://www.suse.com/security/cve/CVE-2020-6474"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6474",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6474"
},
{
"cve": "CVE-2020-6475",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6475"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6475",
"url": "https://www.suse.com/security/cve/CVE-2020-6475"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6475",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6475"
},
{
"cve": "CVE-2020-6476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6476"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6476",
"url": "https://www.suse.com/security/cve/CVE-2020-6476"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6476",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6476"
},
{
"cve": "CVE-2020-6477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6477"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6477",
"url": "https://www.suse.com/security/cve/CVE-2020-6477"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6477",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6477"
},
{
"cve": "CVE-2020-6478",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6478"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6478",
"url": "https://www.suse.com/security/cve/CVE-2020-6478"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6478",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6478"
},
{
"cve": "CVE-2020-6479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6479"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6479",
"url": "https://www.suse.com/security/cve/CVE-2020-6479"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6479",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6479"
},
{
"cve": "CVE-2020-6480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6480"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6480",
"url": "https://www.suse.com/security/cve/CVE-2020-6480"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6480",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6480"
},
{
"cve": "CVE-2020-6481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6481"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6481",
"url": "https://www.suse.com/security/cve/CVE-2020-6481"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6481",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6481"
},
{
"cve": "CVE-2020-6482",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6482"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6482",
"url": "https://www.suse.com/security/cve/CVE-2020-6482"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6482",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6482"
},
{
"cve": "CVE-2020-6483",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6483"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6483",
"url": "https://www.suse.com/security/cve/CVE-2020-6483"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6483",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6483"
},
{
"cve": "CVE-2020-6484",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6484"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6484",
"url": "https://www.suse.com/security/cve/CVE-2020-6484"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6484",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6484"
},
{
"cve": "CVE-2020-6485",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6485"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6485",
"url": "https://www.suse.com/security/cve/CVE-2020-6485"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6485",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6485"
},
{
"cve": "CVE-2020-6486",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6486"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6486",
"url": "https://www.suse.com/security/cve/CVE-2020-6486"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6486",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6486"
},
{
"cve": "CVE-2020-6487",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6487"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6487",
"url": "https://www.suse.com/security/cve/CVE-2020-6487"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6487",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6487"
},
{
"cve": "CVE-2020-6488",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6488"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6488",
"url": "https://www.suse.com/security/cve/CVE-2020-6488"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6488",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6488"
},
{
"cve": "CVE-2020-6489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6489"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive information from disk via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6489",
"url": "https://www.suse.com/security/cve/CVE-2020-6489"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6489",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6489"
},
{
"cve": "CVE-2020-6490",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6490"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6490",
"url": "https://www.suse.com/security/cve/CVE-2020-6490"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6490",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6490"
},
{
"cve": "CVE-2020-6491",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6491"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6491",
"url": "https://www.suse.com/security/cve/CVE-2020-6491"
},
{
"category": "external",
"summary": "SUSE Bug 1171910 for CVE-2020-6491",
"url": "https://bugzilla.suse.com/1171910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6491"
},
{
"cve": "CVE-2020-6493",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6493"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6493",
"url": "https://www.suse.com/security/cve/CVE-2020-6493"
},
{
"category": "external",
"summary": "SUSE Bug 1172496 for CVE-2020-6493",
"url": "https://bugzilla.suse.com/1172496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6493"
},
{
"cve": "CVE-2020-6494",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6494"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6494",
"url": "https://www.suse.com/security/cve/CVE-2020-6494"
},
{
"category": "external",
"summary": "SUSE Bug 1172496 for CVE-2020-6494",
"url": "https://bugzilla.suse.com/1172496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6494"
},
{
"cve": "CVE-2020-6495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6495"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6495",
"url": "https://www.suse.com/security/cve/CVE-2020-6495"
},
{
"category": "external",
"summary": "SUSE Bug 1172496 for CVE-2020-6495",
"url": "https://bugzilla.suse.com/1172496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6495"
},
{
"cve": "CVE-2020-6496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6496"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6496",
"url": "https://www.suse.com/security/cve/CVE-2020-6496"
},
{
"category": "external",
"summary": "SUSE Bug 1172496 for CVE-2020-6496",
"url": "https://bugzilla.suse.com/1172496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6496"
},
{
"cve": "CVE-2020-6505",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6505"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6505",
"url": "https://www.suse.com/security/cve/CVE-2020-6505"
},
{
"category": "external",
"summary": "SUSE Bug 1173029 for CVE-2020-6505",
"url": "https://bugzilla.suse.com/1173029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6505"
},
{
"cve": "CVE-2020-6506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6506"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6506",
"url": "https://www.suse.com/security/cve/CVE-2020-6506"
},
{
"category": "external",
"summary": "SUSE Bug 1173029 for CVE-2020-6506",
"url": "https://bugzilla.suse.com/1173029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6506"
},
{
"cve": "CVE-2020-6507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6507"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6507",
"url": "https://www.suse.com/security/cve/CVE-2020-6507"
},
{
"category": "external",
"summary": "SUSE Bug 1173029 for CVE-2020-6507",
"url": "https://bugzilla.suse.com/1173029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6507"
},
{
"cve": "CVE-2020-6509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6509"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6509",
"url": "https://www.suse.com/security/cve/CVE-2020-6509"
},
{
"category": "external",
"summary": "SUSE Bug 1173251 for CVE-2020-6509",
"url": "https://bugzilla.suse.com/1173251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6509"
},
{
"cve": "CVE-2020-6510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6510"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6510",
"url": "https://www.suse.com/security/cve/CVE-2020-6510"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6510",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6510"
},
{
"cve": "CVE-2020-6511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6511"
}
],
"notes": [
{
"category": "general",
"text": "Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6511",
"url": "https://www.suse.com/security/cve/CVE-2020-6511"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6511",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6511"
},
{
"cve": "CVE-2020-6512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6512"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6512",
"url": "https://www.suse.com/security/cve/CVE-2020-6512"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6512",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6512"
},
{
"cve": "CVE-2020-6513",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6513"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6513",
"url": "https://www.suse.com/security/cve/CVE-2020-6513"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6513",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6513"
},
{
"cve": "CVE-2020-6514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6514"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6514",
"url": "https://www.suse.com/security/cve/CVE-2020-6514"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6514",
"url": "https://bugzilla.suse.com/1174189"
},
{
"category": "external",
"summary": "SUSE Bug 1174538 for CVE-2020-6514",
"url": "https://bugzilla.suse.com/1174538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6514"
},
{
"cve": "CVE-2020-6515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6515"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6515",
"url": "https://www.suse.com/security/cve/CVE-2020-6515"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6515",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6515"
},
{
"cve": "CVE-2020-6516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6516"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6516",
"url": "https://www.suse.com/security/cve/CVE-2020-6516"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6516",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6516"
},
{
"cve": "CVE-2020-6517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6517"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6517",
"url": "https://www.suse.com/security/cve/CVE-2020-6517"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6517",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6517"
},
{
"cve": "CVE-2020-6518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6518"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6518",
"url": "https://www.suse.com/security/cve/CVE-2020-6518"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6518",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6518"
},
{
"cve": "CVE-2020-6519",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6519"
}
],
"notes": [
{
"category": "general",
"text": "Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6519",
"url": "https://www.suse.com/security/cve/CVE-2020-6519"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6519",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6519"
},
{
"cve": "CVE-2020-6520",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6520"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6520",
"url": "https://www.suse.com/security/cve/CVE-2020-6520"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6520",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6520"
},
{
"cve": "CVE-2020-6521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6521"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6521",
"url": "https://www.suse.com/security/cve/CVE-2020-6521"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6521",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6521"
},
{
"cve": "CVE-2020-6522",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6522"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6522",
"url": "https://www.suse.com/security/cve/CVE-2020-6522"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6522",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6522"
},
{
"cve": "CVE-2020-6523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6523"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6523",
"url": "https://www.suse.com/security/cve/CVE-2020-6523"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6523",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6523"
},
{
"cve": "CVE-2020-6524",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6524"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6524",
"url": "https://www.suse.com/security/cve/CVE-2020-6524"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6524",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6524"
},
{
"cve": "CVE-2020-6525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6525"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6525",
"url": "https://www.suse.com/security/cve/CVE-2020-6525"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6525",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6525"
},
{
"cve": "CVE-2020-6526",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6526"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6526",
"url": "https://www.suse.com/security/cve/CVE-2020-6526"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6526",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6526"
},
{
"cve": "CVE-2020-6527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6527"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6527",
"url": "https://www.suse.com/security/cve/CVE-2020-6527"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6527",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6527"
},
{
"cve": "CVE-2020-6528",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6528"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6528",
"url": "https://www.suse.com/security/cve/CVE-2020-6528"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6528",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6528"
},
{
"cve": "CVE-2020-6529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6529"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6529",
"url": "https://www.suse.com/security/cve/CVE-2020-6529"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6529",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6529"
},
{
"cve": "CVE-2020-6530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6530"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6530",
"url": "https://www.suse.com/security/cve/CVE-2020-6530"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6530",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6530"
},
{
"cve": "CVE-2020-6531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6531"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6531",
"url": "https://www.suse.com/security/cve/CVE-2020-6531"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6531",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6531"
},
{
"cve": "CVE-2020-6532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6532"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6532",
"url": "https://www.suse.com/security/cve/CVE-2020-6532"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6532",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6532"
},
{
"cve": "CVE-2020-6533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6533"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6533",
"url": "https://www.suse.com/security/cve/CVE-2020-6533"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6533",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6533"
},
{
"cve": "CVE-2020-6534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6534"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6534",
"url": "https://www.suse.com/security/cve/CVE-2020-6534"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6534",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6534"
},
{
"cve": "CVE-2020-6535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6535"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6535",
"url": "https://www.suse.com/security/cve/CVE-2020-6535"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6535",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6535"
},
{
"cve": "CVE-2020-6536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6536"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the user to install a PWA to spoof the contents of the Omnibox (URL bar) via a crafted PWA.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6536",
"url": "https://www.suse.com/security/cve/CVE-2020-6536"
},
{
"category": "external",
"summary": "SUSE Bug 1174189 for CVE-2020-6536",
"url": "https://bugzilla.suse.com/1174189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6536"
},
{
"cve": "CVE-2020-6537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6537"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6537",
"url": "https://www.suse.com/security/cve/CVE-2020-6537"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6537",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6537"
},
{
"cve": "CVE-2020-6538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6538"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6538",
"url": "https://www.suse.com/security/cve/CVE-2020-6538"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6538",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6538"
},
{
"cve": "CVE-2020-6539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6539"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6539",
"url": "https://www.suse.com/security/cve/CVE-2020-6539"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6539",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6539"
},
{
"cve": "CVE-2020-6540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6540"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6540",
"url": "https://www.suse.com/security/cve/CVE-2020-6540"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6540",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6540"
},
{
"cve": "CVE-2020-6541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6541"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6541",
"url": "https://www.suse.com/security/cve/CVE-2020-6541"
},
{
"category": "external",
"summary": "SUSE Bug 1174582 for CVE-2020-6541",
"url": "https://bugzilla.suse.com/1174582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6541"
},
{
"cve": "CVE-2020-6542",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6542"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6542",
"url": "https://www.suse.com/security/cve/CVE-2020-6542"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6542",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6542"
},
{
"cve": "CVE-2020-6543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6543"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6543",
"url": "https://www.suse.com/security/cve/CVE-2020-6543"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6543",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6543"
},
{
"cve": "CVE-2020-6544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6544"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6544",
"url": "https://www.suse.com/security/cve/CVE-2020-6544"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6544",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6544"
},
{
"cve": "CVE-2020-6545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6545"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6545",
"url": "https://www.suse.com/security/cve/CVE-2020-6545"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6545",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6545"
},
{
"cve": "CVE-2020-6546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6546"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6546",
"url": "https://www.suse.com/security/cve/CVE-2020-6546"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6546",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6546"
},
{
"cve": "CVE-2020-6547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6547"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6547",
"url": "https://www.suse.com/security/cve/CVE-2020-6547"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6547",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6547"
},
{
"cve": "CVE-2020-6548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6548"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6548",
"url": "https://www.suse.com/security/cve/CVE-2020-6548"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6548",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6548"
},
{
"cve": "CVE-2020-6549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6549"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6549",
"url": "https://www.suse.com/security/cve/CVE-2020-6549"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6549",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6549"
},
{
"cve": "CVE-2020-6550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6550"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6550",
"url": "https://www.suse.com/security/cve/CVE-2020-6550"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6550",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6550"
},
{
"cve": "CVE-2020-6551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6551"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6551",
"url": "https://www.suse.com/security/cve/CVE-2020-6551"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6551",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6551"
},
{
"cve": "CVE-2020-6552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6552"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6552",
"url": "https://www.suse.com/security/cve/CVE-2020-6552"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6552",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6552"
},
{
"cve": "CVE-2020-6553",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6553"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6553",
"url": "https://www.suse.com/security/cve/CVE-2020-6553"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6553",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6553"
},
{
"cve": "CVE-2020-6554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6554"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6554",
"url": "https://www.suse.com/security/cve/CVE-2020-6554"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6554",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6554"
},
{
"cve": "CVE-2020-6555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6555"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6555",
"url": "https://www.suse.com/security/cve/CVE-2020-6555"
},
{
"category": "external",
"summary": "SUSE Bug 1175085 for CVE-2020-6555",
"url": "https://bugzilla.suse.com/1175085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6555"
},
{
"cve": "CVE-2020-6556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6556"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6556",
"url": "https://www.suse.com/security/cve/CVE-2020-6556"
},
{
"category": "external",
"summary": "SUSE Bug 1175505 for CVE-2020-6556",
"url": "https://bugzilla.suse.com/1175505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6556"
},
{
"cve": "CVE-2020-6557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6557"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6557",
"url": "https://www.suse.com/security/cve/CVE-2020-6557"
},
{
"category": "external",
"summary": "SUSE Bug 1177408 for CVE-2020-6557",
"url": "https://bugzilla.suse.com/1177408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-6557"
},
{
"cve": "CVE-2020-6558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6558"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6558",
"url": "https://www.suse.com/security/cve/CVE-2020-6558"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6558",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6558"
},
{
"cve": "CVE-2020-6559",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6559"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6559",
"url": "https://www.suse.com/security/cve/CVE-2020-6559"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6559",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6559"
},
{
"cve": "CVE-2020-6560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6560"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6560",
"url": "https://www.suse.com/security/cve/CVE-2020-6560"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6560",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6560"
},
{
"cve": "CVE-2020-6561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6561"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6561",
"url": "https://www.suse.com/security/cve/CVE-2020-6561"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6561",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6561"
},
{
"cve": "CVE-2020-6562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6562"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6562",
"url": "https://www.suse.com/security/cve/CVE-2020-6562"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6562",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6562"
},
{
"cve": "CVE-2020-6563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6563"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6563",
"url": "https://www.suse.com/security/cve/CVE-2020-6563"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6563",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6563"
},
{
"cve": "CVE-2020-6564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6564"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6564",
"url": "https://www.suse.com/security/cve/CVE-2020-6564"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6564",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6564"
},
{
"cve": "CVE-2020-6565",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6565"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6565",
"url": "https://www.suse.com/security/cve/CVE-2020-6565"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6565",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6565"
},
{
"cve": "CVE-2020-6566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6566"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6566",
"url": "https://www.suse.com/security/cve/CVE-2020-6566"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6566",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6566"
},
{
"cve": "CVE-2020-6567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6567"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6567",
"url": "https://www.suse.com/security/cve/CVE-2020-6567"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6567",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6567"
},
{
"cve": "CVE-2020-6568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6568"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6568",
"url": "https://www.suse.com/security/cve/CVE-2020-6568"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6568",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6568"
},
{
"cve": "CVE-2020-6569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6569"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6569",
"url": "https://www.suse.com/security/cve/CVE-2020-6569"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6569",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6569"
},
{
"cve": "CVE-2020-6570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6570"
}
],
"notes": [
{
"category": "general",
"text": "Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted WebRTC interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6570",
"url": "https://www.suse.com/security/cve/CVE-2020-6570"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6570",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6570"
},
{
"cve": "CVE-2020-6571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6571"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6571",
"url": "https://www.suse.com/security/cve/CVE-2020-6571"
},
{
"category": "external",
"summary": "SUSE Bug 1175757 for CVE-2020-6571",
"url": "https://bugzilla.suse.com/1175757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6571"
},
{
"cve": "CVE-2020-6573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6573"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6573",
"url": "https://www.suse.com/security/cve/CVE-2020-6573"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-6573",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6573"
},
{
"cve": "CVE-2020-6574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6574"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege escalation via a crafted binary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6574",
"url": "https://www.suse.com/security/cve/CVE-2020-6574"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-6574",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6574"
},
{
"cve": "CVE-2020-6575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6575"
}
],
"notes": [
{
"category": "general",
"text": "Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6575",
"url": "https://www.suse.com/security/cve/CVE-2020-6575"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-6575",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6575"
},
{
"cve": "CVE-2020-6576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6576"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6576",
"url": "https://www.suse.com/security/cve/CVE-2020-6576"
},
{
"category": "external",
"summary": "SUSE Bug 1176306 for CVE-2020-6576",
"url": "https://bugzilla.suse.com/1176306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2020-6576"
},
{
"cve": "CVE-2020-6831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6831"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR \u003c 68.8, Firefox \u003c 76, and Thunderbird \u003c 68.8.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6831",
"url": "https://www.suse.com/security/cve/CVE-2020-6831"
},
{
"category": "external",
"summary": "SUSE Bug 1171186 for CVE-2020-6831",
"url": "https://bugzilla.suse.com/1171186"
},
{
"category": "external",
"summary": "SUSE Bug 1171247 for CVE-2020-6831",
"url": "https://bugzilla.suse.com/1171247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-6831"
},
{
"cve": "CVE-2021-21106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21106"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21106",
"url": "https://www.suse.com/security/cve/CVE-2021-21106"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21106",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21106"
},
{
"cve": "CVE-2021-21107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21107"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21107",
"url": "https://www.suse.com/security/cve/CVE-2021-21107"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21107",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21107"
},
{
"cve": "CVE-2021-21108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21108"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21108",
"url": "https://www.suse.com/security/cve/CVE-2021-21108"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21108",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21108"
},
{
"cve": "CVE-2021-21109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21109"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21109",
"url": "https://www.suse.com/security/cve/CVE-2021-21109"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21109",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21109"
},
{
"cve": "CVE-2021-21110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21110"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21110",
"url": "https://www.suse.com/security/cve/CVE-2021-21110"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21110",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21110"
},
{
"cve": "CVE-2021-21111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21111"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21111",
"url": "https://www.suse.com/security/cve/CVE-2021-21111"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21111",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21111"
},
{
"cve": "CVE-2021-21112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21112"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21112",
"url": "https://www.suse.com/security/cve/CVE-2021-21112"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21112",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21112"
},
{
"cve": "CVE-2021-21113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21113"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21113",
"url": "https://www.suse.com/security/cve/CVE-2021-21113"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21113",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21113"
},
{
"cve": "CVE-2021-21114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21114"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21114",
"url": "https://www.suse.com/security/cve/CVE-2021-21114"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21114",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21114"
},
{
"cve": "CVE-2021-21115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21115"
}
],
"notes": [
{
"category": "general",
"text": "User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21115",
"url": "https://www.suse.com/security/cve/CVE-2021-21115"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21115",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21115"
},
{
"cve": "CVE-2021-21116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21116"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21116",
"url": "https://www.suse.com/security/cve/CVE-2021-21116"
},
{
"category": "external",
"summary": "SUSE Bug 1180645 for CVE-2021-21116",
"url": "https://bugzilla.suse.com/1180645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21116"
},
{
"cve": "CVE-2021-21117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21117"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21117",
"url": "https://www.suse.com/security/cve/CVE-2021-21117"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21117",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21117"
},
{
"cve": "CVE-2021-21118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21118"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21118",
"url": "https://www.suse.com/security/cve/CVE-2021-21118"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21118",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21118"
},
{
"cve": "CVE-2021-21119",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21119"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21119",
"url": "https://www.suse.com/security/cve/CVE-2021-21119"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21119",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21119"
},
{
"cve": "CVE-2021-21120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21120"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21120",
"url": "https://www.suse.com/security/cve/CVE-2021-21120"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21120",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21120"
},
{
"cve": "CVE-2021-21121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21121"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21121",
"url": "https://www.suse.com/security/cve/CVE-2021-21121"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21121",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21121"
},
{
"cve": "CVE-2021-21122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21122"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21122",
"url": "https://www.suse.com/security/cve/CVE-2021-21122"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21122",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21122"
},
{
"cve": "CVE-2021-21123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21123"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21123",
"url": "https://www.suse.com/security/cve/CVE-2021-21123"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21123",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21123"
},
{
"cve": "CVE-2021-21124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21124"
}
],
"notes": [
{
"category": "general",
"text": "Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21124",
"url": "https://www.suse.com/security/cve/CVE-2021-21124"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21124",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21124"
},
{
"cve": "CVE-2021-21125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21125"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21125",
"url": "https://www.suse.com/security/cve/CVE-2021-21125"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21125",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21125"
},
{
"cve": "CVE-2021-21126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21126"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21126",
"url": "https://www.suse.com/security/cve/CVE-2021-21126"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21126",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21126"
},
{
"cve": "CVE-2021-21127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21127"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21127",
"url": "https://www.suse.com/security/cve/CVE-2021-21127"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21127",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21127"
},
{
"cve": "CVE-2021-21128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21128"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21128",
"url": "https://www.suse.com/security/cve/CVE-2021-21128"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21128",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21128"
},
{
"cve": "CVE-2021-21129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21129"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21129",
"url": "https://www.suse.com/security/cve/CVE-2021-21129"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21129",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21129"
},
{
"cve": "CVE-2021-21130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21130"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21130",
"url": "https://www.suse.com/security/cve/CVE-2021-21130"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21130",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21130"
},
{
"cve": "CVE-2021-21131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21131"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21131",
"url": "https://www.suse.com/security/cve/CVE-2021-21131"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21131",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21131"
},
{
"cve": "CVE-2021-21132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21132"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21132",
"url": "https://www.suse.com/security/cve/CVE-2021-21132"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21132",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21132"
},
{
"cve": "CVE-2021-21133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21133"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21133",
"url": "https://www.suse.com/security/cve/CVE-2021-21133"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21133",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21133"
},
{
"cve": "CVE-2021-21134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21134"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21134",
"url": "https://www.suse.com/security/cve/CVE-2021-21134"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21134",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21134"
},
{
"cve": "CVE-2021-21135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21135"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21135",
"url": "https://www.suse.com/security/cve/CVE-2021-21135"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21135",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21135"
},
{
"cve": "CVE-2021-21136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21136"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21136",
"url": "https://www.suse.com/security/cve/CVE-2021-21136"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21136",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21136"
},
{
"cve": "CVE-2021-21137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21137"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21137",
"url": "https://www.suse.com/security/cve/CVE-2021-21137"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21137",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21137"
},
{
"cve": "CVE-2021-21138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21138"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21138",
"url": "https://www.suse.com/security/cve/CVE-2021-21138"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21138",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21138"
},
{
"cve": "CVE-2021-21139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21139"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21139",
"url": "https://www.suse.com/security/cve/CVE-2021-21139"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21139",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21139"
},
{
"cve": "CVE-2021-21140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21140"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21140",
"url": "https://www.suse.com/security/cve/CVE-2021-21140"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21140",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21140"
},
{
"cve": "CVE-2021-21141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21141"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21141",
"url": "https://www.suse.com/security/cve/CVE-2021-21141"
},
{
"category": "external",
"summary": "SUSE Bug 1181137 for CVE-2021-21141",
"url": "https://bugzilla.suse.com/1181137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21141"
},
{
"cve": "CVE-2021-21142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21142"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21142",
"url": "https://www.suse.com/security/cve/CVE-2021-21142"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21142",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21142"
},
{
"cve": "CVE-2021-21143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21143"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21143",
"url": "https://www.suse.com/security/cve/CVE-2021-21143"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21143",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21143"
},
{
"cve": "CVE-2021-21144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21144"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21144",
"url": "https://www.suse.com/security/cve/CVE-2021-21144"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21144",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21144"
},
{
"cve": "CVE-2021-21145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21145"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21145",
"url": "https://www.suse.com/security/cve/CVE-2021-21145"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21145",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21145"
},
{
"cve": "CVE-2021-21146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21146"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21146",
"url": "https://www.suse.com/security/cve/CVE-2021-21146"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21146",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21146"
},
{
"cve": "CVE-2021-21147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21147"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21147",
"url": "https://www.suse.com/security/cve/CVE-2021-21147"
},
{
"category": "external",
"summary": "SUSE Bug 1181772 for CVE-2021-21147",
"url": "https://bugzilla.suse.com/1181772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21147"
},
{
"cve": "CVE-2021-21148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21148"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21148",
"url": "https://www.suse.com/security/cve/CVE-2021-21148"
},
{
"category": "external",
"summary": "SUSE Bug 1181827 for CVE-2021-21148",
"url": "https://bugzilla.suse.com/1181827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21148"
},
{
"cve": "CVE-2021-21149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21149"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21149",
"url": "https://www.suse.com/security/cve/CVE-2021-21149"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21149",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21149"
},
{
"cve": "CVE-2021-21150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21150"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21150",
"url": "https://www.suse.com/security/cve/CVE-2021-21150"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21150",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21150"
},
{
"cve": "CVE-2021-21151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21151"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21151",
"url": "https://www.suse.com/security/cve/CVE-2021-21151"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21151",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21151"
},
{
"cve": "CVE-2021-21152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21152"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21152",
"url": "https://www.suse.com/security/cve/CVE-2021-21152"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21152",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21152"
},
{
"cve": "CVE-2021-21153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21153"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21153",
"url": "https://www.suse.com/security/cve/CVE-2021-21153"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21153",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21153"
},
{
"cve": "CVE-2021-21154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21154"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21154",
"url": "https://www.suse.com/security/cve/CVE-2021-21154"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21154",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21154"
},
{
"cve": "CVE-2021-21155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21155"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21155",
"url": "https://www.suse.com/security/cve/CVE-2021-21155"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21155",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21155"
},
{
"cve": "CVE-2021-21156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21156"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21156",
"url": "https://www.suse.com/security/cve/CVE-2021-21156"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21156",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21156"
},
{
"cve": "CVE-2021-21157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21157"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21157",
"url": "https://www.suse.com/security/cve/CVE-2021-21157"
},
{
"category": "external",
"summary": "SUSE Bug 1182358 for CVE-2021-21157",
"url": "https://bugzilla.suse.com/1182358"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21157"
},
{
"cve": "CVE-2021-21159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21159"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21159",
"url": "https://www.suse.com/security/cve/CVE-2021-21159"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21159",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21159",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21159"
},
{
"cve": "CVE-2021-21160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21160"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21160",
"url": "https://www.suse.com/security/cve/CVE-2021-21160"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21160",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21160",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21160"
},
{
"cve": "CVE-2021-21161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21161"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21161",
"url": "https://www.suse.com/security/cve/CVE-2021-21161"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21161",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21161",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21161"
},
{
"cve": "CVE-2021-21162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21162"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21162",
"url": "https://www.suse.com/security/cve/CVE-2021-21162"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21162",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21162",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21162"
},
{
"cve": "CVE-2021-21163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21163"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21163",
"url": "https://www.suse.com/security/cve/CVE-2021-21163"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21163",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21163",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21163"
},
{
"cve": "CVE-2021-21164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21164"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21164",
"url": "https://www.suse.com/security/cve/CVE-2021-21164"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21164",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21164",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21164"
},
{
"cve": "CVE-2021-21165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21165"
}
],
"notes": [
{
"category": "general",
"text": "Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21165",
"url": "https://www.suse.com/security/cve/CVE-2021-21165"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21165",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21165",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21165"
},
{
"cve": "CVE-2021-21166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21166"
}
],
"notes": [
{
"category": "general",
"text": "Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21166",
"url": "https://www.suse.com/security/cve/CVE-2021-21166"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21166",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21166",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21166"
},
{
"cve": "CVE-2021-21167",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21167"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21167",
"url": "https://www.suse.com/security/cve/CVE-2021-21167"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21167",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21167",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21167"
},
{
"cve": "CVE-2021-21168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21168"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21168",
"url": "https://www.suse.com/security/cve/CVE-2021-21168"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21168",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21168",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21168"
},
{
"cve": "CVE-2021-21169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21169"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21169",
"url": "https://www.suse.com/security/cve/CVE-2021-21169"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21169",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21169",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21169"
},
{
"cve": "CVE-2021-21170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21170"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21170",
"url": "https://www.suse.com/security/cve/CVE-2021-21170"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21170",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21170",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21170"
},
{
"cve": "CVE-2021-21171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21171"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21171",
"url": "https://www.suse.com/security/cve/CVE-2021-21171"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21171",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21171",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21171"
},
{
"cve": "CVE-2021-21172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21172"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21172",
"url": "https://www.suse.com/security/cve/CVE-2021-21172"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21172",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21172",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21172"
},
{
"cve": "CVE-2021-21173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21173"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21173",
"url": "https://www.suse.com/security/cve/CVE-2021-21173"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21173",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21173",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21173"
},
{
"cve": "CVE-2021-21174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21174"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21174",
"url": "https://www.suse.com/security/cve/CVE-2021-21174"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21174",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21174",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21174"
},
{
"cve": "CVE-2021-21175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21175"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21175",
"url": "https://www.suse.com/security/cve/CVE-2021-21175"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21175",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21175",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21175"
},
{
"cve": "CVE-2021-21176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21176"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21176",
"url": "https://www.suse.com/security/cve/CVE-2021-21176"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21176",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21176",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21176"
},
{
"cve": "CVE-2021-21177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21177"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21177",
"url": "https://www.suse.com/security/cve/CVE-2021-21177"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21177",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21177",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21177"
},
{
"cve": "CVE-2021-21178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21178"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21178",
"url": "https://www.suse.com/security/cve/CVE-2021-21178"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21178",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21178",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21178"
},
{
"cve": "CVE-2021-21179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21179"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21179",
"url": "https://www.suse.com/security/cve/CVE-2021-21179"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21179",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21179",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21179"
},
{
"cve": "CVE-2021-21180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21180"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21180",
"url": "https://www.suse.com/security/cve/CVE-2021-21180"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21180",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21180",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21180"
},
{
"cve": "CVE-2021-21181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21181"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21181",
"url": "https://www.suse.com/security/cve/CVE-2021-21181"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21181",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21181",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21181"
},
{
"cve": "CVE-2021-21182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21182"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21182",
"url": "https://www.suse.com/security/cve/CVE-2021-21182"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21182",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21182",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21182"
},
{
"cve": "CVE-2021-21183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21183"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21183",
"url": "https://www.suse.com/security/cve/CVE-2021-21183"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21183",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21183",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21183"
},
{
"cve": "CVE-2021-21184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21184"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21184",
"url": "https://www.suse.com/security/cve/CVE-2021-21184"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21184",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21184",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21184"
},
{
"cve": "CVE-2021-21185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21185"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21185",
"url": "https://www.suse.com/security/cve/CVE-2021-21185"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21185",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21185",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21185"
},
{
"cve": "CVE-2021-21186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21186"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21186",
"url": "https://www.suse.com/security/cve/CVE-2021-21186"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21186",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21186",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21186"
},
{
"cve": "CVE-2021-21187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21187"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21187",
"url": "https://www.suse.com/security/cve/CVE-2021-21187"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21187",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21187",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21187"
},
{
"cve": "CVE-2021-21188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21188"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21188",
"url": "https://www.suse.com/security/cve/CVE-2021-21188"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21188",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21188",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21188"
},
{
"cve": "CVE-2021-21189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21189"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21189",
"url": "https://www.suse.com/security/cve/CVE-2021-21189"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21189",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21189",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21189"
},
{
"cve": "CVE-2021-21190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21190"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21190",
"url": "https://www.suse.com/security/cve/CVE-2021-21190"
},
{
"category": "external",
"summary": "SUSE Bug 1182960 for CVE-2021-21190",
"url": "https://bugzilla.suse.com/1182960"
},
{
"category": "external",
"summary": "SUSE Bug 1183514 for CVE-2021-21190",
"url": "https://bugzilla.suse.com/1183514"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21190"
},
{
"cve": "CVE-2021-21191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21191"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21191",
"url": "https://www.suse.com/security/cve/CVE-2021-21191"
},
{
"category": "external",
"summary": "SUSE Bug 1183515 for CVE-2021-21191",
"url": "https://bugzilla.suse.com/1183515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21191"
},
{
"cve": "CVE-2021-21192",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21192"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21192",
"url": "https://www.suse.com/security/cve/CVE-2021-21192"
},
{
"category": "external",
"summary": "SUSE Bug 1183515 for CVE-2021-21192",
"url": "https://bugzilla.suse.com/1183515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21192"
},
{
"cve": "CVE-2021-21193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21193"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21193",
"url": "https://www.suse.com/security/cve/CVE-2021-21193"
},
{
"category": "external",
"summary": "SUSE Bug 1183515 for CVE-2021-21193",
"url": "https://bugzilla.suse.com/1183515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21193"
},
{
"cve": "CVE-2021-21194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21194"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21194",
"url": "https://www.suse.com/security/cve/CVE-2021-21194"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21194",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21194"
},
{
"cve": "CVE-2021-21195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21195"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21195",
"url": "https://www.suse.com/security/cve/CVE-2021-21195"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21195",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21195"
},
{
"cve": "CVE-2021-21196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21196"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21196",
"url": "https://www.suse.com/security/cve/CVE-2021-21196"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21196",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21196"
},
{
"cve": "CVE-2021-21197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21197"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21197",
"url": "https://www.suse.com/security/cve/CVE-2021-21197"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21197",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21197"
},
{
"cve": "CVE-2021-21198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21198"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21198",
"url": "https://www.suse.com/security/cve/CVE-2021-21198"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21198",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21198"
},
{
"cve": "CVE-2021-21199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21199"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21199",
"url": "https://www.suse.com/security/cve/CVE-2021-21199"
},
{
"category": "external",
"summary": "SUSE Bug 1184256 for CVE-2021-21199",
"url": "https://bugzilla.suse.com/1184256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21199"
},
{
"cve": "CVE-2021-21201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21201"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21201",
"url": "https://www.suse.com/security/cve/CVE-2021-21201"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21201",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21201"
},
{
"cve": "CVE-2021-21202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21202"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21202",
"url": "https://www.suse.com/security/cve/CVE-2021-21202"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21202",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21202"
},
{
"cve": "CVE-2021-21203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21203"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21203",
"url": "https://www.suse.com/security/cve/CVE-2021-21203"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21203",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21203"
},
{
"cve": "CVE-2021-21204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21204"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21204",
"url": "https://www.suse.com/security/cve/CVE-2021-21204"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21204",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21204"
},
{
"cve": "CVE-2021-21205",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21205"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21205",
"url": "https://www.suse.com/security/cve/CVE-2021-21205"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21205",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21205"
},
{
"cve": "CVE-2021-21206",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21206"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21206",
"url": "https://www.suse.com/security/cve/CVE-2021-21206"
},
{
"category": "external",
"summary": "SUSE Bug 1184700 for CVE-2021-21206",
"url": "https://bugzilla.suse.com/1184700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21206"
},
{
"cve": "CVE-2021-21207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21207"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21207",
"url": "https://www.suse.com/security/cve/CVE-2021-21207"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21207",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21207"
},
{
"cve": "CVE-2021-21208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21208"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21208",
"url": "https://www.suse.com/security/cve/CVE-2021-21208"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21208",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21208"
},
{
"cve": "CVE-2021-21209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21209"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21209",
"url": "https://www.suse.com/security/cve/CVE-2021-21209"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21209",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21209"
},
{
"cve": "CVE-2021-21210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21210"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21210",
"url": "https://www.suse.com/security/cve/CVE-2021-21210"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21210",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21210"
},
{
"cve": "CVE-2021-21211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21211"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21211",
"url": "https://www.suse.com/security/cve/CVE-2021-21211"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21211",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21211"
},
{
"cve": "CVE-2021-21212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21212"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21212",
"url": "https://www.suse.com/security/cve/CVE-2021-21212"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21212",
"url": "https://bugzilla.suse.com/1184764"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-21212",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21212"
},
{
"cve": "CVE-2021-21213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21213"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21213",
"url": "https://www.suse.com/security/cve/CVE-2021-21213"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21213",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21213"
},
{
"cve": "CVE-2021-21214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21214"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21214",
"url": "https://www.suse.com/security/cve/CVE-2021-21214"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21214",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21214"
},
{
"cve": "CVE-2021-21215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21215"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21215",
"url": "https://www.suse.com/security/cve/CVE-2021-21215"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21215",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21215"
},
{
"cve": "CVE-2021-21216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21216"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21216",
"url": "https://www.suse.com/security/cve/CVE-2021-21216"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21216",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21216"
},
{
"cve": "CVE-2021-21217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21217"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21217",
"url": "https://www.suse.com/security/cve/CVE-2021-21217"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21217",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21217"
},
{
"cve": "CVE-2021-21218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21218"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21218",
"url": "https://www.suse.com/security/cve/CVE-2021-21218"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21218",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21218"
},
{
"cve": "CVE-2021-21219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21219"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21219",
"url": "https://www.suse.com/security/cve/CVE-2021-21219"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21219",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21219"
},
{
"cve": "CVE-2021-21220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21220"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21220",
"url": "https://www.suse.com/security/cve/CVE-2021-21220"
},
{
"category": "external",
"summary": "SUSE Bug 1184700 for CVE-2021-21220",
"url": "https://bugzilla.suse.com/1184700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-21220"
},
{
"cve": "CVE-2021-21221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21221"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21221",
"url": "https://www.suse.com/security/cve/CVE-2021-21221"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21221",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21221"
},
{
"cve": "CVE-2021-21222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21222"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21222",
"url": "https://www.suse.com/security/cve/CVE-2021-21222"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21222",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21222"
},
{
"cve": "CVE-2021-21223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21223"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21223",
"url": "https://www.suse.com/security/cve/CVE-2021-21223"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21223",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21223"
},
{
"cve": "CVE-2021-21224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21224"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21224",
"url": "https://www.suse.com/security/cve/CVE-2021-21224"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21224",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21224"
},
{
"cve": "CVE-2021-21225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21225"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21225",
"url": "https://www.suse.com/security/cve/CVE-2021-21225"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21225",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21225"
},
{
"cve": "CVE-2021-21226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21226"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21226",
"url": "https://www.suse.com/security/cve/CVE-2021-21226"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21226",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-21226"
},
{
"cve": "CVE-2021-21227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21227"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21227",
"url": "https://www.suse.com/security/cve/CVE-2021-21227"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21227",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21227"
},
{
"cve": "CVE-2021-21228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21228"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21228",
"url": "https://www.suse.com/security/cve/CVE-2021-21228"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21228",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21228"
},
{
"cve": "CVE-2021-21229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21229"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21229",
"url": "https://www.suse.com/security/cve/CVE-2021-21229"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21229",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21229"
},
{
"cve": "CVE-2021-21230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21230"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21230",
"url": "https://www.suse.com/security/cve/CVE-2021-21230"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21230",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21230"
},
{
"cve": "CVE-2021-21231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21231"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21231",
"url": "https://www.suse.com/security/cve/CVE-2021-21231"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21231",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21231"
},
{
"cve": "CVE-2021-21232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21232"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21232",
"url": "https://www.suse.com/security/cve/CVE-2021-21232"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21232",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21232"
},
{
"cve": "CVE-2021-21233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21233"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21233",
"url": "https://www.suse.com/security/cve/CVE-2021-21233"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21233",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-21233"
},
{
"cve": "CVE-2021-30506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30506"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to install a web application to inject scripts or HTML into a privileged page via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30506",
"url": "https://www.suse.com/security/cve/CVE-2021-30506"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30506",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30506"
},
{
"cve": "CVE-2021-30507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30507"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30507",
"url": "https://www.suse.com/security/cve/CVE-2021-30507"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30507",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30507"
},
{
"cve": "CVE-2021-30508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30508"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30508",
"url": "https://www.suse.com/security/cve/CVE-2021-30508"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30508",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30508"
},
{
"cve": "CVE-2021-30509",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30509"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page and a crafted Chrome extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30509",
"url": "https://www.suse.com/security/cve/CVE-2021-30509"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30509",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30509"
},
{
"cve": "CVE-2021-30510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30510"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30510",
"url": "https://www.suse.com/security/cve/CVE-2021-30510"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30510",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30510"
},
{
"cve": "CVE-2021-30511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30511"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30511",
"url": "https://www.suse.com/security/cve/CVE-2021-30511"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30511",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30511"
},
{
"cve": "CVE-2021-30512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30512"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30512",
"url": "https://www.suse.com/security/cve/CVE-2021-30512"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30512",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30512"
},
{
"cve": "CVE-2021-30513",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30513"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30513",
"url": "https://www.suse.com/security/cve/CVE-2021-30513"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30513",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30513"
},
{
"cve": "CVE-2021-30514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30514"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30514",
"url": "https://www.suse.com/security/cve/CVE-2021-30514"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30514",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30514"
},
{
"cve": "CVE-2021-30515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30515"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30515",
"url": "https://www.suse.com/security/cve/CVE-2021-30515"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30515",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30515"
},
{
"cve": "CVE-2021-30516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30516"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30516",
"url": "https://www.suse.com/security/cve/CVE-2021-30516"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30516",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30516"
},
{
"cve": "CVE-2021-30517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30517"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30517",
"url": "https://www.suse.com/security/cve/CVE-2021-30517"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30517",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30517"
},
{
"cve": "CVE-2021-30518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30518"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30518",
"url": "https://www.suse.com/security/cve/CVE-2021-30518"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30518",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30518"
},
{
"cve": "CVE-2021-30519",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30519"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments app to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30519",
"url": "https://www.suse.com/security/cve/CVE-2021-30519"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30519",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30519"
},
{
"cve": "CVE-2021-30520",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30520"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30520",
"url": "https://www.suse.com/security/cve/CVE-2021-30520"
},
{
"category": "external",
"summary": "SUSE Bug 1185908 for CVE-2021-30520",
"url": "https://bugzilla.suse.com/1185908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30520"
},
{
"cve": "CVE-2021-30521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30521"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30521",
"url": "https://www.suse.com/security/cve/CVE-2021-30521"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30521",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30521"
},
{
"cve": "CVE-2021-30522",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30522"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30522",
"url": "https://www.suse.com/security/cve/CVE-2021-30522"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30522",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30522"
},
{
"cve": "CVE-2021-30523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30523"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30523",
"url": "https://www.suse.com/security/cve/CVE-2021-30523"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30523",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30523"
},
{
"cve": "CVE-2021-30524",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30524"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30524",
"url": "https://www.suse.com/security/cve/CVE-2021-30524"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30524",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30524"
},
{
"cve": "CVE-2021-30525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30525"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30525",
"url": "https://www.suse.com/security/cve/CVE-2021-30525"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30525",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30525"
},
{
"cve": "CVE-2021-30526",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30526"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30526",
"url": "https://www.suse.com/security/cve/CVE-2021-30526"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30526",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30526"
},
{
"cve": "CVE-2021-30527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30527"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30527",
"url": "https://www.suse.com/security/cve/CVE-2021-30527"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30527",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30527"
},
{
"cve": "CVE-2021-30528",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30528"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30528",
"url": "https://www.suse.com/security/cve/CVE-2021-30528"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30528",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30528"
},
{
"cve": "CVE-2021-30529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30529"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30529",
"url": "https://www.suse.com/security/cve/CVE-2021-30529"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30529",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30529"
},
{
"cve": "CVE-2021-30530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30530"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30530",
"url": "https://www.suse.com/security/cve/CVE-2021-30530"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30530",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30530"
},
{
"cve": "CVE-2021-30531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30531"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30531",
"url": "https://www.suse.com/security/cve/CVE-2021-30531"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30531",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30531"
},
{
"cve": "CVE-2021-30532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30532"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30532",
"url": "https://www.suse.com/security/cve/CVE-2021-30532"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30532",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30532"
},
{
"cve": "CVE-2021-30533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30533"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30533",
"url": "https://www.suse.com/security/cve/CVE-2021-30533"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30533",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30533"
},
{
"cve": "CVE-2021-30534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30534"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30534",
"url": "https://www.suse.com/security/cve/CVE-2021-30534"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30534",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30534"
},
{
"cve": "CVE-2021-30535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30535"
}
],
"notes": [
{
"category": "general",
"text": "Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30535",
"url": "https://www.suse.com/security/cve/CVE-2021-30535"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30535",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30535"
},
{
"cve": "CVE-2021-30536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30536"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30536",
"url": "https://www.suse.com/security/cve/CVE-2021-30536"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30536",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30536"
},
{
"cve": "CVE-2021-30537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30537"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass cookie policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30537",
"url": "https://www.suse.com/security/cve/CVE-2021-30537"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30537",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30537"
},
{
"cve": "CVE-2021-30538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30538"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30538",
"url": "https://www.suse.com/security/cve/CVE-2021-30538"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30538",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30538"
},
{
"cve": "CVE-2021-30539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30539"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30539",
"url": "https://www.suse.com/security/cve/CVE-2021-30539"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30539",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30539"
},
{
"cve": "CVE-2021-30540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30540"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30540",
"url": "https://www.suse.com/security/cve/CVE-2021-30540"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-30540",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30540"
},
{
"cve": "CVE-2021-30541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30541"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30541",
"url": "https://www.suse.com/security/cve/CVE-2021-30541"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30541",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30541"
},
{
"cve": "CVE-2021-30544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30544"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30544",
"url": "https://www.suse.com/security/cve/CVE-2021-30544"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30544",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30544"
},
{
"cve": "CVE-2021-30545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30545"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30545",
"url": "https://www.suse.com/security/cve/CVE-2021-30545"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30545",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30545"
},
{
"cve": "CVE-2021-30546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30546"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30546",
"url": "https://www.suse.com/security/cve/CVE-2021-30546"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30546",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30546"
},
{
"cve": "CVE-2021-30547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30547"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30547",
"url": "https://www.suse.com/security/cve/CVE-2021-30547"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30547",
"url": "https://bugzilla.suse.com/1187141"
},
{
"category": "external",
"summary": "SUSE Bug 1188275 for CVE-2021-30547",
"url": "https://bugzilla.suse.com/1188275"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30547"
},
{
"cve": "CVE-2021-30548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30548"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30548",
"url": "https://www.suse.com/security/cve/CVE-2021-30548"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30548",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30548"
},
{
"cve": "CVE-2021-30549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30549"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30549",
"url": "https://www.suse.com/security/cve/CVE-2021-30549"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30549",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30549"
},
{
"cve": "CVE-2021-30550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30550"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30550",
"url": "https://www.suse.com/security/cve/CVE-2021-30550"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30550",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30550"
},
{
"cve": "CVE-2021-30551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30551"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30551",
"url": "https://www.suse.com/security/cve/CVE-2021-30551"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30551",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30551"
},
{
"cve": "CVE-2021-30552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30552"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30552",
"url": "https://www.suse.com/security/cve/CVE-2021-30552"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30552",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30552"
},
{
"cve": "CVE-2021-30553",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30553"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30553",
"url": "https://www.suse.com/security/cve/CVE-2021-30553"
},
{
"category": "external",
"summary": "SUSE Bug 1187141 for CVE-2021-30553",
"url": "https://bugzilla.suse.com/1187141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30553"
},
{
"cve": "CVE-2021-30554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30554"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30554",
"url": "https://www.suse.com/security/cve/CVE-2021-30554"
},
{
"category": "external",
"summary": "SUSE Bug 1187481 for CVE-2021-30554",
"url": "https://bugzilla.suse.com/1187481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30554"
},
{
"cve": "CVE-2021-30555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30555"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and user gesture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30555",
"url": "https://www.suse.com/security/cve/CVE-2021-30555"
},
{
"category": "external",
"summary": "SUSE Bug 1187481 for CVE-2021-30555",
"url": "https://bugzilla.suse.com/1187481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30555"
},
{
"cve": "CVE-2021-30556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30556"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30556",
"url": "https://www.suse.com/security/cve/CVE-2021-30556"
},
{
"category": "external",
"summary": "SUSE Bug 1187481 for CVE-2021-30556",
"url": "https://bugzilla.suse.com/1187481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30556"
},
{
"cve": "CVE-2021-30557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30557"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30557",
"url": "https://www.suse.com/security/cve/CVE-2021-30557"
},
{
"category": "external",
"summary": "SUSE Bug 1187481 for CVE-2021-30557",
"url": "https://bugzilla.suse.com/1187481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30557"
},
{
"cve": "CVE-2021-30559",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30559"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30559",
"url": "https://www.suse.com/security/cve/CVE-2021-30559"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30559",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30559"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-30561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30561"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30561",
"url": "https://www.suse.com/security/cve/CVE-2021-30561"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30561",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30561"
},
{
"cve": "CVE-2021-30562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30562"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30562",
"url": "https://www.suse.com/security/cve/CVE-2021-30562"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30562",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30562"
},
{
"cve": "CVE-2021-30563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30563"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30563",
"url": "https://www.suse.com/security/cve/CVE-2021-30563"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30563",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30563"
},
{
"cve": "CVE-2021-30564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30564"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30564",
"url": "https://www.suse.com/security/cve/CVE-2021-30564"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30564",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-30564"
},
{
"cve": "CVE-2021-30565",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30565"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30565",
"url": "https://www.suse.com/security/cve/CVE-2021-30565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30565"
},
{
"cve": "CVE-2021-30566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30566"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30566",
"url": "https://www.suse.com/security/cve/CVE-2021-30566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30566"
},
{
"cve": "CVE-2021-30567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30567"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to open DevTools to potentially exploit heap corruption via specific user gesture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30567",
"url": "https://www.suse.com/security/cve/CVE-2021-30567"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30567"
},
{
"cve": "CVE-2021-30568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30568"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30568",
"url": "https://www.suse.com/security/cve/CVE-2021-30568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30568"
},
{
"cve": "CVE-2021-30569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30569"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30569",
"url": "https://www.suse.com/security/cve/CVE-2021-30569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30569"
},
{
"cve": "CVE-2021-30571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30571"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30571",
"url": "https://www.suse.com/security/cve/CVE-2021-30571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30571"
},
{
"cve": "CVE-2021-30572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30572"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30572",
"url": "https://www.suse.com/security/cve/CVE-2021-30572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30572"
},
{
"cve": "CVE-2021-30573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30573"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30573",
"url": "https://www.suse.com/security/cve/CVE-2021-30573"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30573"
},
{
"cve": "CVE-2021-30574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30574"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30574",
"url": "https://www.suse.com/security/cve/CVE-2021-30574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30574"
},
{
"cve": "CVE-2021-30575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30575"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30575",
"url": "https://www.suse.com/security/cve/CVE-2021-30575"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30575"
},
{
"cve": "CVE-2021-30576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30576"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30576",
"url": "https://www.suse.com/security/cve/CVE-2021-30576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30576"
},
{
"cve": "CVE-2021-30577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30577"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30577",
"url": "https://www.suse.com/security/cve/CVE-2021-30577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30577"
},
{
"cve": "CVE-2021-30578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30578"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30578",
"url": "https://www.suse.com/security/cve/CVE-2021-30578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30578"
},
{
"cve": "CVE-2021-30579",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30579"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in UI framework in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30579",
"url": "https://www.suse.com/security/cve/CVE-2021-30579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30579"
},
{
"cve": "CVE-2021-30581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30581"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30581",
"url": "https://www.suse.com/security/cve/CVE-2021-30581"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30581"
},
{
"cve": "CVE-2021-30582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30582"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30582",
"url": "https://www.suse.com/security/cve/CVE-2021-30582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30582"
},
{
"cve": "CVE-2021-30584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30584"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Downloads in Google Chrome on Android prior to 92.0.4515.107 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30584",
"url": "https://www.suse.com/security/cve/CVE-2021-30584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30584"
},
{
"cve": "CVE-2021-30585",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30585"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30585",
"url": "https://www.suse.com/security/cve/CVE-2021-30585"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30585"
},
{
"cve": "CVE-2021-30588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30588"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30588",
"url": "https://www.suse.com/security/cve/CVE-2021-30588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-30588"
},
{
"cve": "CVE-2021-30589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30589"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to bypass navigation restrictions via a crafted click-to-call link.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30589",
"url": "https://www.suse.com/security/cve/CVE-2021-30589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30589"
},
{
"cve": "CVE-2021-30590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30590"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30590",
"url": "https://www.suse.com/security/cve/CVE-2021-30590"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30590",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30590"
},
{
"cve": "CVE-2021-30591",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30591"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30591",
"url": "https://www.suse.com/security/cve/CVE-2021-30591"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30591",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30591"
},
{
"cve": "CVE-2021-30592",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30592"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30592",
"url": "https://www.suse.com/security/cve/CVE-2021-30592"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30592",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30592"
},
{
"cve": "CVE-2021-30593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30593"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30593",
"url": "https://www.suse.com/security/cve/CVE-2021-30593"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30593",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30593"
},
{
"cve": "CVE-2021-30594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30594"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30594",
"url": "https://www.suse.com/security/cve/CVE-2021-30594"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30594",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30594"
},
{
"cve": "CVE-2021-30596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30596"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30596",
"url": "https://www.suse.com/security/cve/CVE-2021-30596"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30596",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30596"
},
{
"cve": "CVE-2021-30597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30597"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30597",
"url": "https://www.suse.com/security/cve/CVE-2021-30597"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30597",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30597"
},
{
"cve": "CVE-2021-30598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30598"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30598",
"url": "https://www.suse.com/security/cve/CVE-2021-30598"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30598",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30598"
},
{
"cve": "CVE-2021-30599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30599"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30599",
"url": "https://www.suse.com/security/cve/CVE-2021-30599"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30599",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30599"
},
{
"cve": "CVE-2021-30600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30600"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30600",
"url": "https://www.suse.com/security/cve/CVE-2021-30600"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30600",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30600"
},
{
"cve": "CVE-2021-30601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30601"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30601",
"url": "https://www.suse.com/security/cve/CVE-2021-30601"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30601",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30601"
},
{
"cve": "CVE-2021-30602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30602"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30602",
"url": "https://www.suse.com/security/cve/CVE-2021-30602"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30602",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30602"
},
{
"cve": "CVE-2021-30603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30603"
}
],
"notes": [
{
"category": "general",
"text": "Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30603",
"url": "https://www.suse.com/security/cve/CVE-2021-30603"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30603",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30603"
},
{
"cve": "CVE-2021-30604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30604"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30604",
"url": "https://www.suse.com/security/cve/CVE-2021-30604"
},
{
"category": "external",
"summary": "SUSE Bug 1189490 for CVE-2021-30604",
"url": "https://bugzilla.suse.com/1189490"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30604"
},
{
"cve": "CVE-2021-30606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30606"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30606 Use after free in Blink",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30606",
"url": "https://www.suse.com/security/cve/CVE-2021-30606"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30606",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30606"
},
{
"cve": "CVE-2021-30607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30607"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30607 Use after free in Permissions",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30607",
"url": "https://www.suse.com/security/cve/CVE-2021-30607"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30607",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30607"
},
{
"cve": "CVE-2021-30608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30608"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30608 Use after free in Web Share",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30608",
"url": "https://www.suse.com/security/cve/CVE-2021-30608"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30608",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30608"
},
{
"cve": "CVE-2021-30609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30609"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30609 Use after free in Sign-In",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30609",
"url": "https://www.suse.com/security/cve/CVE-2021-30609"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30609",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30609"
},
{
"cve": "CVE-2021-30610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30610"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30610 Use after free in Extensions API",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30610",
"url": "https://www.suse.com/security/cve/CVE-2021-30610"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30610",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30610"
},
{
"cve": "CVE-2021-30611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30611"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30611 Use after free in WebRTC",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30611",
"url": "https://www.suse.com/security/cve/CVE-2021-30611"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30611",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30611"
},
{
"cve": "CVE-2021-30612",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30612"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30612 Use after free in WebRTC",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30612",
"url": "https://www.suse.com/security/cve/CVE-2021-30612"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30612",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30612"
},
{
"cve": "CVE-2021-30613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30613"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30613 Use after free in Base internals",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30613",
"url": "https://www.suse.com/security/cve/CVE-2021-30613"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30613",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30613"
},
{
"cve": "CVE-2021-30614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30614"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30614",
"url": "https://www.suse.com/security/cve/CVE-2021-30614"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30614",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30614"
},
{
"cve": "CVE-2021-30615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30615"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30615 Cross-origin data leak in Navigation",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30615",
"url": "https://www.suse.com/security/cve/CVE-2021-30615"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30615",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30615"
},
{
"cve": "CVE-2021-30616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30616"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30616 Use after free in Media",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30616",
"url": "https://www.suse.com/security/cve/CVE-2021-30616"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30616",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30616"
},
{
"cve": "CVE-2021-30617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30617"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30617 Policy bypass in Blink",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30617",
"url": "https://www.suse.com/security/cve/CVE-2021-30617"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30617",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30617"
},
{
"cve": "CVE-2021-30618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30618"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30618 Inappropriate implementation in DevTools",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30618",
"url": "https://www.suse.com/security/cve/CVE-2021-30618"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30618",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30618"
},
{
"cve": "CVE-2021-30619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30619"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30619 UI Spoofing in Autofill",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30619",
"url": "https://www.suse.com/security/cve/CVE-2021-30619"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30619",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30619"
},
{
"cve": "CVE-2021-30620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30620"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30620",
"url": "https://www.suse.com/security/cve/CVE-2021-30620"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30620",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30620"
},
{
"cve": "CVE-2021-30621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30621"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30621 UI Spoofing in Autofill",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30621",
"url": "https://www.suse.com/security/cve/CVE-2021-30621"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30621",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30621"
},
{
"cve": "CVE-2021-30622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30622"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30622 Use after free in WebApp Installs",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30622",
"url": "https://www.suse.com/security/cve/CVE-2021-30622"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30622",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30622"
},
{
"cve": "CVE-2021-30623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30623"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30623 Use after free in Bookmarks",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30623",
"url": "https://www.suse.com/security/cve/CVE-2021-30623"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30623",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30623"
},
{
"cve": "CVE-2021-30624",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30624"
}
],
"notes": [
{
"category": "general",
"text": "Chromium: CVE-2021-30624 Use after free in Autofill",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30624",
"url": "https://www.suse.com/security/cve/CVE-2021-30624"
},
{
"category": "external",
"summary": "SUSE Bug 1190096 for CVE-2021-30624",
"url": "https://bugzilla.suse.com/1190096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-30624"
},
{
"cve": "CVE-2021-30625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30625"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30625",
"url": "https://www.suse.com/security/cve/CVE-2021-30625"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30625",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30625"
},
{
"cve": "CVE-2021-30626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30626"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30626",
"url": "https://www.suse.com/security/cve/CVE-2021-30626"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30626",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30626"
},
{
"cve": "CVE-2021-30627",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30627"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30627",
"url": "https://www.suse.com/security/cve/CVE-2021-30627"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30627",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30627"
},
{
"cve": "CVE-2021-30628",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30628"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30628",
"url": "https://www.suse.com/security/cve/CVE-2021-30628"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30628",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30628"
},
{
"cve": "CVE-2021-30629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30629"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30629",
"url": "https://www.suse.com/security/cve/CVE-2021-30629"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30629",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30629"
},
{
"cve": "CVE-2021-30630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30630"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30630",
"url": "https://www.suse.com/security/cve/CVE-2021-30630"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30630",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30630"
},
{
"cve": "CVE-2021-30631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30631"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30631",
"url": "https://www.suse.com/security/cve/CVE-2021-30631"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30631",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30631"
},
{
"cve": "CVE-2021-30632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30632"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30632",
"url": "https://www.suse.com/security/cve/CVE-2021-30632"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30632",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30632"
},
{
"cve": "CVE-2021-30633",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30633"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30633",
"url": "https://www.suse.com/security/cve/CVE-2021-30633"
},
{
"category": "external",
"summary": "SUSE Bug 1190476 for CVE-2021-30633",
"url": "https://bugzilla.suse.com/1190476"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromedriver-93.0.4577.82-1.1.x86_64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.aarch64",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.ppc64le",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.s390x",
"openSUSE Tumbleweed:chromium-93.0.4577.82-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-30633"
}
]
}
ghsa-3r7c-93gc-73gw
Vulnerability from github
Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
{
"affected": [],
"aliases": [
"CVE-2019-5798"
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-05-23T20:29:00Z",
"severity": "MODERATE"
},
"details": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"id": "GHSA-3r7c-93gc-73gw",
"modified": "2022-10-11T19:00:48Z",
"published": "2022-05-24T16:46:27Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"type": "WEB",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
},
{
"type": "WEB",
"url": "https://crbug.com/883596"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"type": "WEB",
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3997-1"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
cnvd-2019-23139
Vulnerability from cnvd
厂商已发布漏洞修复程序,请及时关注更新: https://www.google.com/intl/zh-CN_ALL/chrome/
| Name | Google, Inc. Chrome <73.0.3683.75 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2019-5798"
}
},
"description": "Chrome\u662f\u7531\u8c37\u6b4c\u5f00\u53d1\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5de5\u5177\u3002\n\nGoogle Chrome 73.0.3683.75\u4e4b\u524d\u7248\u672c\u4e2d\u7684Skia\u5b58\u5728\u8d8a\u754c\u8bfb\u53d6\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u7cbe\u5fc3\u8bbe\u8ba1\u7684HTML\u9875\u9762\u6267\u884c\u8d8a\u754c\u5185\u5b58\u8bfb\u53d6\u3002",
"discovererName": "security",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.google.com/intl/zh-CN_ALL/chrome/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2019-23139",
"openTime": "2019-07-17",
"patchDescription": "Chrome\u662f\u7531\u8c37\u6b4c\u5f00\u53d1\u7684\u4e00\u6b3e\u8bbe\u8ba1\u7b80\u5355\u3001\u9ad8\u6548\u7684Web\u6d4f\u89c8\u5de5\u5177\uff0c\u5176\u7279\u70b9\u662f\u7b80\u6d01\u3001\u5feb\u901f\u3002\r\n\r\nGoogle Chrome 73.0.3683.75\u4e4b\u524d\u7248\u672c\u4e2d\u7684Skia\u5b58\u5728\u8d8a\u754c\u8bfb\u53d6\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u7cbe\u5fc3\u8bbe\u8ba1\u7684HTML\u9875\u9762\u6267\u884c\u8d8a\u754c\u5185\u5b58\u8bfb\u53d6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Google Chrome\u8d8a\u754c\u8bfb\u53d6\u6f0f\u6d1e\uff08CNVD-2019-23139\uff09\u7684\u8865\u4e01",
"products": {
"product": "Google, Inc. Chrome \u003c73.0.3683.75"
},
"referenceLink": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"serverity": "\u4e2d",
"submitTime": "2019-03-13",
"title": "Google Chrome\u8d8a\u754c\u8bfb\u53d6\u6f0f\u6d1e\uff08CNVD-2019-23139\uff09"
}
suse-su-2019:1458-1
Vulnerability from csaf_suse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaThunderbird",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaThunderbird fixes the following issues:\n\nMozilla Thunderbird was updated to 60.7.0.\n\n* Attachment pane of Write window no longer focussed when attaching\n files using a keyboard shortcut\n\nThese security issues were fixed (MFSA 2019-15 bsc#1135824):\n\n* CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS\n* CVE-2019-9816: Type confusion with object groups and UnboxedObjects\n* CVE-2019-9817: Stealing of cross-domain images using canvas\n* CVE-2019-9818: Use-after-free in crash generation server\n* CVE-2019-9819: Compartment mismatch with fetch API\n* CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell\n* CVE-2019-11691: Use-after-free in XMLHttpRequest\n* CVE-2019-11692: Use-after-free removing listeners in the event listener manager\n* CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux\n* CVE-2019-7317: Use-after-free in png_image_free of libpng library\n* CVE-2019-9797: Cross-origin theft of images with createImageBitmap\n* CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext\n* CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox\n* CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks\n* CVE-2019-5798: Out-of-bounds read in Skia\n* CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-1458,SUSE-SLE-Product-WE-15-2019-1458,SUSE-SLE-Product-WE-15-SP1-2019-1458",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1458-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:1458-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191458-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:1458-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-June/005544.html"
},
{
"category": "self",
"summary": "SUSE Bug 1130694",
"url": "https://bugzilla.suse.com/1130694"
},
{
"category": "self",
"summary": "SUSE Bug 1133267",
"url": "https://bugzilla.suse.com/1133267"
},
{
"category": "self",
"summary": "SUSE Bug 1135824",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-18511 page",
"url": "https://www.suse.com/security/cve/CVE-2018-18511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11691 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11692 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11693 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11694 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11698 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5798 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9797 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9800 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9815 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9817 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9818 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9819 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9820 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9820/"
}
],
"title": "Security update for MozillaThunderbird",
"tracking": {
"current_release_date": "2019-06-11T08:09:40Z",
"generator": {
"date": "2019-06-11T08:09:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:1458-1",
"initial_release_date": "2019-06-11T08:09:40Z",
"revision_history": [
{
"date": "2019-06-11T08:09:40Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.aarch64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.ppc64le"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.s390x"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-buildsymbols-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"product_id": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15",
"product_id": "SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-18511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-18511"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-18511",
"url": "https://www.suse.com/security/cve/CVE-2018-18511"
},
{
"category": "external",
"summary": "SUSE Bug 1125330 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125330"
},
{
"category": "external",
"summary": "SUSE Bug 1125396 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1125396"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2018-18511",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-18511"
},
{
"cve": "CVE-2019-11691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11691"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11691",
"url": "https://www.suse.com/security/cve/CVE-2019-11691"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11691",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11691"
},
{
"cve": "CVE-2019-11692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11692"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11692",
"url": "https://www.suse.com/security/cve/CVE-2019-11692"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11692",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11692"
},
{
"cve": "CVE-2019-11693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11693"
}
],
"notes": [
{
"category": "general",
"text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11693",
"url": "https://www.suse.com/security/cve/CVE-2019-11693"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11693",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11693"
},
{
"cve": "CVE-2019-11694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11694"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11694",
"url": "https://www.suse.com/security/cve/CVE-2019-11694"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11694",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11694"
},
{
"cve": "CVE-2019-11698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11698"
}
],
"notes": [
{
"category": "general",
"text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11698",
"url": "https://www.suse.com/security/cve/CVE-2019-11698"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-11698",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-11698"
},
{
"cve": "CVE-2019-5798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5798"
}
],
"notes": [
{
"category": "general",
"text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5798",
"url": "https://www.suse.com/security/cve/CVE-2019-5798"
},
{
"category": "external",
"summary": "SUSE Bug 1129059 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1129059"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-5798",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "moderate"
}
],
"title": "CVE-2019-5798"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "low"
}
],
"title": "CVE-2019-7317"
},
{
"cve": "CVE-2019-9797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9797"
}
],
"notes": [
{
"category": "general",
"text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9797",
"url": "https://www.suse.com/security/cve/CVE-2019-9797"
},
{
"category": "external",
"summary": "SUSE Bug 1129821 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1129821"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9797",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9797"
},
{
"cve": "CVE-2019-9800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9800"
}
],
"notes": [
{
"category": "general",
"text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9800",
"url": "https://www.suse.com/security/cve/CVE-2019-9800"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9800",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9800"
},
{
"cve": "CVE-2019-9815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9815"
}
],
"notes": [
{
"category": "general",
"text": "If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9815",
"url": "https://www.suse.com/security/cve/CVE-2019-9815"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9815",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9815"
},
{
"cve": "CVE-2019-9816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9816"
}
],
"notes": [
{
"category": "general",
"text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9816",
"url": "https://www.suse.com/security/cve/CVE-2019-9816"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9816",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9816"
},
{
"cve": "CVE-2019-9817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9817"
}
],
"notes": [
{
"category": "general",
"text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9817",
"url": "https://www.suse.com/security/cve/CVE-2019-9817"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9817",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9817"
},
{
"cve": "CVE-2019-9818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9818"
}
],
"notes": [
{
"category": "general",
"text": "A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9818",
"url": "https://www.suse.com/security/cve/CVE-2019-9818"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9818",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9818"
},
{
"cve": "CVE-2019-9819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9819"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9819",
"url": "https://www.suse.com/security/cve/CVE-2019-9819"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9819",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9819"
},
{
"cve": "CVE-2019-9820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9820"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9820",
"url": "https://www.suse.com/security/cve/CVE-2019-9820"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-9820",
"url": "https://bugzilla.suse.com/1135824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-60.7.0-3.33.2.x86_64",
"SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-60.7.0-3.33.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-06-11T08:09:40Z",
"details": "important"
}
],
"title": "CVE-2019-9820"
}
]
}
gsd-2019-5798
Vulnerability from gsd
{
"GSD": {
"alias": "CVE-2019-5798",
"description": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"id": "GSD-2019-5798",
"references": [
"https://www.suse.com/security/cve/CVE-2019-5798.html",
"https://www.debian.org/security/2019/dsa-4451",
"https://www.debian.org/security/2019/dsa-4448",
"https://www.debian.org/security/2019/dsa-4421",
"https://access.redhat.com/errata/RHSA-2019:1310",
"https://access.redhat.com/errata/RHSA-2019:1309",
"https://access.redhat.com/errata/RHSA-2019:1308",
"https://access.redhat.com/errata/RHSA-2019:1269",
"https://access.redhat.com/errata/RHSA-2019:1267",
"https://access.redhat.com/errata/RHSA-2019:1265",
"https://access.redhat.com/errata/RHSA-2019:0708",
"https://ubuntu.com/security/CVE-2019-5798",
"https://advisories.mageia.org/CVE-2019-5798.html",
"https://security.archlinux.org/CVE-2019-5798",
"https://linux.oracle.com/cve/CVE-2019-5798.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-5798"
],
"details": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"id": "GSD-2019-5798",
"modified": "2023-12-13T01:23:56.786685Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "security@google.com",
"ID": "CVE-2019-5798",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_value": "prior to 73.0.3683.75"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Out of bounds read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
},
{
"name": "https://crbug.com/883596",
"refsource": "MISC",
"url": "https://crbug.com/883596"
},
{
"name": "DSA-4451",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1308",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "RHSA-2019:1309",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "openSUSE-SU-2019:1534",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "openSUSE-SU-2019:1666",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "73.0.3683.75",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:suse:package_hub:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:backports:sle-15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "security@google.com",
"ID": "CVE-2019-5798"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://crbug.com/883596",
"refsource": "MISC",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://crbug.com/883596"
},
{
"name": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
"refsource": "MISC",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
},
{
"name": "DSA-4451",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
"refsource": "BUGTRAQ",
"tags": [
"Issue Tracking",
"Mailing List",
"Third Party Advisory"
],
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"name": "USN-3997-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"name": "openSUSE-SU-2019:1484",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"name": "RHSA-2019:1310",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"name": "RHSA-2019:1309",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"name": "RHSA-2019:1308",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"name": "openSUSE-SU-2019:1534",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"name": "openSUSE-SU-2019:1664",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"name": "openSUSE-SU-2019:1666",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-10-11T14:30Z",
"publishedDate": "2019-05-23T20:29Z"
}
}
}
fkie_cve-2019-5798
Vulnerability from fkie_nvd
| URL | Tags | ||
|---|---|---|---|
| chrome-cve-admin@google.com | http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html | ||
| chrome-cve-admin@google.com | http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html | ||
| chrome-cve-admin@google.com | http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html | ||
| chrome-cve-admin@google.com | http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html | ||
| chrome-cve-admin@google.com | https://access.redhat.com/errata/RHSA-2019:1308 | ||
| chrome-cve-admin@google.com | https://access.redhat.com/errata/RHSA-2019:1309 | ||
| chrome-cve-admin@google.com | https://access.redhat.com/errata/RHSA-2019:1310 | ||
| chrome-cve-admin@google.com | https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html | ||
| chrome-cve-admin@google.com | https://crbug.com/883596 | ||
| chrome-cve-admin@google.com | https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html | ||
| chrome-cve-admin@google.com | https://seclists.org/bugtraq/2019/May/67 | ||
| chrome-cve-admin@google.com | https://usn.ubuntu.com/3997-1/ | ||
| chrome-cve-admin@google.com | https://www.debian.org/security/2019/dsa-4451 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2019:1308 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2019:1309 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2019:1310 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://crbug.com/883596 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://seclists.org/bugtraq/2019/May/67 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/3997-1/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://www.debian.org/security/2019/dsa-4451 |
| Vendor | Product | Version | |
|---|---|---|---|
| chrome | * | ||
| debian | debian_linux | 8.0 | |
| debian | debian_linux | 9.0 | |
| suse | package_hub | - | |
| canonical | ubuntu_linux | 16.04 | |
| canonical | ubuntu_linux | 18.04 | |
| canonical | ubuntu_linux | 18.10 | |
| canonical | ubuntu_linux | 19.04 | |
| opensuse | backports | sle-15 | |
| opensuse | leap | 15.0 | |
| opensuse | leap | 15.1 | |
| opensuse | leap | 42.3 | |
| redhat | enterprise_linux | 6.0 | |
| redhat | enterprise_linux | 7.0 | |
| redhat | enterprise_linux | 8.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EA174888-9FEB-4029-8E0D-D6CFCF1A74F6",
"versionEndExcluding": "73.0.3683.75",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:suse:package_hub:-:*:*:*:*:*:*:*",
"matchCriteriaId": "284A8DA0-317B-4BBE-AECB-7E91BBF0DD3B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
"matchCriteriaId": "07C312A0-CD2C-4B9C-B064-6409B25C278F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
"matchCriteriaId": "CD783B0C-9246-47D9-A937-6144FE8BFF0F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:backports:sle-15:*:*:*:*:*:*:*",
"matchCriteriaId": "1CBC4824-9D9F-427D-87A6-60B2CEBAAFEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F1E78106-58E6-4D59-990F-75DA575BFAD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
"matchCriteriaId": "5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
},
{
"lang": "es",
"value": "La falta de comprobaci\u00f3n de l\u00edmites correcta en Skia en Google Chrome antes de la versi\u00f3n 73.0.3683.75, permiti\u00f3 que un atacante remoto ejecutara una lectura de memoria fuera de l\u00edmites por medio de una p\u00e1gina HTML creada."
}
],
"id": "CVE-2019-5798",
"lastModified": "2024-11-21T04:45:30.940",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-05-23T20:29:01.047",
"references": [
{
"source": "chrome-cve-admin@google.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"source": "chrome-cve-admin@google.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"source": "chrome-cve-admin@google.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"source": "chrome-cve-admin@google.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://crbug.com/883596"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://www.debian.org/security/2019/dsa-4451"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2019:1308"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2019:1309"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2019:1310"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://crbug.com/883596"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://seclists.org/bugtraq/2019/May/67"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://usn.ubuntu.com/3997-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.debian.org/security/2019/dsa-4451"
}
],
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-125"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.